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ABSTRACT 


In support of the National Defense Strategy, the Department of Defense (DOD) 
has recognized energy security as an essential part of its strategic intent. In keeping with 
the DOD’s strategic goals, the Department of the Navy announced three pillars of success 
to meet those goals: Resilience, Reliability, and Efficiency. To best establish energy 
security for DOD installations, microgrids have been embedded into the energy systems 
as additional energy sources and controls that support mission readiness. Previous 
microgrid resilience research has focused on system design and cost efficiency. 
Considering a different approach, this thesis will pose the question of whether established 
recovery procedures build resilience within DOD  microgrids. Using the Human 
Performance Impact Recovery Analysis (HPIRA) tool developed as a part of this 
research, human cognition and human error are implemented into various recovery 
procedures to determine the most successful recovery times and the man-hours required 
for a successful recovery. This research demonstrates the impact of human cognition in 
human actions and allows microgrid stakeholders to understand how human factors 


impact a microgrid system's recovery. 
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Executive Summary 





Following guidance in the National Defense Strategy, the Department of Defense (DoD) has 
set forth initiatives to improve energy security in their energy infrastructures and systems [1]. 
Specifically, the DoD desires to build resilience within energy installations to ensure mission 
readiness [2]. Resilience research for DoD microgrids is needed since they are susceptible to 
their own energy disruptions while also improving resilience of DoD installations as well. To 
support DoD energy initiatives, the United States (U.S.) Navy (USN) established resilience 
as one of the three pillars of energy security with reliability and efficiency [3]. While most 
resilience research of microgrids have been found to focus on system design and cost, this 
thesis focuses on the human element involved in a microgrid recovery. Specifically, this 
thesis analyzes if established recovery actions improve microgrid resilience, or potentially 


further degrade it, when considering human factors. 


This thesis provides a means of improving DoD microgrid resilience by determining man- 
power requirements for realistic and effective recovery events. Additionally, this thesis 
provides microgrid stakeholders a qualitative and quantitative source for microgrid recov- 
ery man-hour requirements. This data should be used in DoD energy and microgrid decision 
making efforts in regards manpower requirements and annual budgets for training, logistics, 


and employment. 


The methodology developed in this thesis is comprised of an eleven-step process to deter- 
mine the total amount of man-hours needed to recover degraded microgrid components. 


The eleven steps are as follows: 


. Define Microgrid Component of Interest 

. Determine Recovery Procedure for Microgrid Component of Interest 

. Perform Stakeholder Analysis 

. Create the Precedence Order of the Recovery Task List 

. Apply Standardized Plant Analysis Risk-Human Reliability Analysis (SPAR-H) and 
Determine Human Error Probability (HEP) values for all Tasks 


л BW Ne 


ON 


. Choose the Appropriate Probability Distribution for Duration Sampling 
7. Find Individual Task Duration based on chosen Probability Distribution 


xix 


8. Find АП Possible Task Network Paths and Durations 
9. Determine Critical Path and Duration of Task Network 
10. Simulate and Analyze Component Recovery Durations 
11. Conduct and Analyze a Back of the Envelope (BOE) Total Duration Calculation for 


Multi-Component Failure Events 


This methodology establishes the Human Performance Impact Recovery Analysis (HPIRA) 
tool that evaluates the impact of the human element on microgrid recovery procedures. The 
implementation of SPAR-H allows for human factors to be evaluated with eight Performance 
Shaping Factors (PSFs) for each recovery task in the recovery process network. The final 
SPAR-H provides HEP values to determine a sample duration time for each task. When 
all paths are determined for a given recovery task network, each respective task's sample 
duration is totaled to determine total recovery time of each path. A Monte Carlo simulation 
is applied to all recovery network paths to determine the critical recovery path and recovery 


time. 


This thesis applies the HPIRA tool to conduct two analyses. The first analysis applies 
HPIRA to six different microgrid component recovery efforts to determine each recovery 
processes' critical path to successful completion. The critical paths are analyzed to determine 
the man-hours needed for each successful recovery effort and assess if whether or not human 
cognition plays a role in recovery efforts. In this analysis where conditions are simple and 
ideal, it was determined that human cognition generally impacted recovery completion 
efforts in a positive fashion. The second analysis evaluates two different multi-component 
failure events to determine the total amount of man-hours needed for each recovery event. 
By utilizing successful recovery times for degraded components from the first analysis, 
total recovery times are able to be determined for the two multi-component failure events 
with BOE calculations. Total man-hours required for these events are determined to see 
how effective a single, two-person recovery team is able to recover a severely degraded 
Naval Station (NAVSTA) microgrid. The total man-hours are compared to USN standards 
for microgrid autonomy and consideration of efforts needed to meet those standards are 
discussed. Given that a two-person team will not sufficiently restore a multi-component 
microgrid failure event, estimated recovery team numbers are determined for stakeholder 


interest and awareness. 
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СНАРТЕК 1: 


Introduction 





The Department of Defense (DoD) has aligned itself with the mission priorities set forth by 
the National Defense Strategy to “support strategic priorities expressed in theatre posture 
plans, operation plans, and core mission essential tasks" to include energy security [1]. 
To maintain and support mission readiness, DoD installations require their energy systems 
to be resilient, which rely on the availability and reliability of involved systems [2]. The 
Department of Navy (DoN) has developed an energy security framework to support DoD 
guidance by specifying three pillars of energy security as seen in Figure 1.1: 1) Reliability, 
2) Resiliency, and 3) Efficiency. In the past, the DoD has dedicated a great amount of 
resources into researching and developing solutions to increase reliability and efficiency in 
the context of energy security. Resilience, however, has significantly less completed research 
work than that of reliability and efficiency. This is due to the complexity and consistency of 
measuring resilience, determining the proper and appropriate definition of resilience, and 
using a holistic perspective in the context of energy security [3]. With this in mind, the 
DoN and DoD are pursuing innovative avenues of research to improve resilience of energy 
systems within DoD installations [1]. 


Reliability Resiliency Efficiency 
Capability Capability [En Capability 
to prevent to adapt to to reduce 
and resist «оке andrecover 277 demand | 
utility Duration from utility а апа costof | 
disruptions Т disruptions а utilities 


Frequency 
* Availability 
* Power Quality 


* Energy 
Storage 

* Advanced 
Switching 

• Exercises 


* Diversity 
* Cybersecurity 





Figure 1.1. The Three Pillars of Energy Security. Source: [1]. 


1.1 Statement of Contribution 

The primary purpose of this thesis is to improve resilience within DoD installation mi- 
crogrids to support DoD directives in energy security. This thesis will apply a Human 
Reliability Analysis (HRA) to established recovery procedures and determine man-hours 
required for a successful recovery event. By understanding the human effort needed for suc- 
cessful microgrid recovery events, stakeholders can best plan, improve, and support DoD 
microgrid personnel limitations to improve microgrid resilience. The Human Performance 
Impact Recovery Analysis (HPIRA) tool developed within this thesis allows for the impact 
of human error to be assessed within recovery procedures. Results from the HPIRA tool will 
be assessed to determine the most successful recovery times and the man-hours required 


for various recovery scenarios. 


1.2 Resilience within a System 

In orderto improve resilience of any microgrid system, an appropriate definition of resilience 
must be chosen along with properly identifying its contribution factors. This allows for 
focused analysis of potential system improvements and their impacts on improving microgrid 
system resilience. Woods explains that resilience is defined as an adaptation of a system's 
robustness, rebound, graceful extensibility, and sustained adaptability [4]. The four concepts 


as explained in [4] are: 


* Robustness: How effectively a system reacts or responds to an increased set of distur- 
bances on the system 

* Rebound: How effectively a system can bounce back and return to its normal level or 
operation when impacted by disrupting event 

* Extensibility: How effectively a system overcomes risk of sudden failure when it is 
pushed beyond its boundaries 

• Sustained Adaptability: How effectively a system adapts to future surprises as condi- 


tions evolve 


The concept of rebound aims to understand how certain systems return to normal operations 
better than others [4]. Rebound capabilities are meant to improve a system's response from 
significantly disrupting events that degrade normal operational conditions [4]. This concept 


encourages system modeling exploration of disrupted systems so that a system's rebound, 


in both operation and design, can be improved and capable of taking on various disrupting 
events [4]. This thesis focuses on improving the rebound of a DoD microgrid system by 
assessing the cognitive effects of operators carrying out recovery procedures. Additionally, 
this thesis will present its methodology and experimentation. The findings will contribute 


to improving microgrid resilience within DoD installations. 


1.3 Systems Engineering Application 

Systems engineering is the practice of expressing needs or requirement into “operationally 
suitable blocks of systems" [5]. Blanchard and Fabrycky [5] explain that the Systems 
Engineering Process (SEP) is an iterative process that includes requirements analysis, 
functional analysis and allocation, design synthesis and verification, and system analysis and 
control. Additionally, the SEP considers a holistic approach to include concepts of design, 
manufacturing, test and evaluation, and support resources to best balance cost, schedule, and 
performance throughout the system's life cycle [5]. By implementing systems engineering 
within microgrid systems, operational effectiveness and suitability can be improved [3]. A 
facet of operational effectiveness and suitability is reliability engineering. In [5], reliability 


engineering focuses on a system's probability to operate with or without failure. 


Many research efforts such as system design modifications and life cycle cost estimations 
have been assessed on their impacts to building resilience within microgrids, however, they 
do not encompass the entirety of SEP but only touch on a few considerations. This is not to 
say that those efforts are inadequate or incomplete, but that in fact they are an essential "piece 
of the puzzle" in improving microgrid system resilience. It is upon all systems engineers to 
take a piece of the “how to improve microgrid resilience" puzzle and iterate and synthesize 
their findings with one another other to improve microgrid system resilience. Microgrid 
recovery processes will be analyzed from the system engineering perspective to include 
similar and different considerations of the holistic perspective as described in [3]. This 
thesis will apply system engineering practices of stakeholder analysis, project management, 
and reliability engineering to determine if microgrid recovery processes improve microgrid 


resilience. 


1.3.1  Microgrid System Stakeholders 

The purpose of identifying system stakeholders is to ensure that all *voices" that are 
involved within a DoD microgrid system are considered and communicated with so that 
special interests, needs, and/or concerns are addressed and well known [5]. An important 
part of systems engineering is to determine primary and secondary stakeholders who are 
involved within a given task, operation, or system. By performing this analysis, end users, 


operators, and maintainers can be identified in performing microgrid recovery processes. 


1.3.2 Microgrid System Project Management 

Systems engineering project management scheduling tools such as project task networks 
allow for stakeholders to properly plan, organize, and coordinate project efforts. Project 
task networks evaluate sequential project events or activities from a "beginning" node an 
"end" node with corresponding duration times for each node [5]. The network tasks can be 
completed in parallel or series while also represents the dependencies between tasks [5]. 
For microgrids, project task networks can be utilized for various functions such as the 
system's technical operating procedures, maintenance procedures, and recovery procedures. 
Assessing all tasks involved within a set of procedures allows for determining “bottle neck” 
points within a process in which delays or degrades the task network. Focusing on these 
efforts allow for potential resilience improvements within microgrid systems. Utilizing the 
Critical Path Method (CPM), the certain nodes and paths within a task network that dictate 


the progress of task completion can be identified for improvements. 


Critical Path Method 

The CPM is a scheduling method applied to a project task network to determine the path 
which represents the longest duration. In determining the critical path, the critical tasks and 
inter-dependencies are identified. By combining those tasks' duration times, the shortest 
possible time to complete the project can be determined. This time is noteworthy for a project 
manager since it benchmarks times for project [5]. The critical path is also important for 
project managers to track in the case of issues or delays of tasks that may impact the critical 


path. 


1.3.3 Microgrid Reliability Engineering 

Reliability engineering is a facet of system design development that includes program 
planning, analyses and predictions, and test and evaluation [5]. Reliability engineering 
focuses on the Probability of Failure (P(f)) and/or Probability of Success (P(s)) tasks that 
determine the the P(f) and/or P(s) of a system [5]. By researching and designing systems 
for reliability, one can potentially reduce the P(f) and risk of a system. In result, maximum 


operational reliability of the system can be obtained [5]. 


1.4 Purpose of Microgrids 

Microgrids have become a "flexible solution" for energy security concerns of modern 
electrical grids [6]. The U.S. Department of Energy (DOE) Microgrid Exchange Group 
defines microgrids as *a group of interconnected loads and distributed energy resources 
within clearly defined electrical boundaries that acts as a single controllable entity with 
respect to the grid" [7]. Microgrids have provided necessary electrical power redundancy, 
energy cost savings, improved clean energy integration with renewable energy resources, 
and diverse options of electrical power supply to various rural and remote communities [6]. 
Hirsch, Parag, and Guerrero [6] explain how microgrids have provided improved resilience 
for energy systems and security by having the ability to rebound, or bounce back quickly 
from a problem. Resilience is a desired quality for microgrids to support DoD policy and 
objectives such as 10 U.S.C. $ 2911(e) and 42 U.S.C. $ 15852 to improve energy security [8]. 


1.4.4 Microgrid Description 

As a System of Systems (SoS), a microgrid is a critical system within DoD energy in- 
frastructures that is composed of various sub-systems and resources that work together to 
produce electrical power [5]. A simple microgrid architecture shown in Figure 1.2 provides 
four primary functions: 1) Generate power, 2) Distribute power, 3) Store energy, and 4) 
System control [8]. Figure 1.2 shows the communication and control, and the electrical 
network within the microgrid architecture as well as its connections to the local utility grid, 


various types distributed energy and resources, and various types of control units. 
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Figure 1.2. Simple Microgrid Architecture. Source: [8] 


Microgrid operations rely on Distributed Energy Resources (DER) that are comprised 
of Distributed Generation (DG) resources and energy storage technologies [9]. Figure 1.3 
describes the breakdown of DERs and the various types of DG resources and energy storage 
technologies that are involved in each. 
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Figure 1.3. DER Resources to Include DG Resources and Energy Storage 
Technologies. Source: [9]. 
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With the objective “їо ensure better energy reliability, security, and efficiency" of installation 
power, microgrids provide two primary modes of operation: grid-connected and island 
mode [10]. Microgrids in grid-connected mode supports and works with the local utility 
grid to exchange power [11]. As the normal condition of microgrid operations, [11] describes 
that grid-connected mode provides energy management with the following three assets at 
their disposal: 


1. DER controllers (DG and optional storage) 
2. Load management 


3. Control of the power exchange with the main grid. 


Microgrids in island mode operate, control, and manage local generation of consumed 
energy with the ability to disconnect from the local utility grid [11]. When operating in 


island mode, a microgrid must be capable of supporting its designed infrastructure of 
DG units, loads, and storage devices collectively [11]. Island mode operation allows for 
increased reliability of an installation's electric power system by integrating “different on- 
site sources with energy storage and load control" [11]. For critical installations that fall 
under entities like the DoD or healthcare systems, island mode operation provides back up 
system reliability so that continued power supply is maintained" [11]. 


Microgrids generate their own power by use of various types of DG resources. As shown in 
Figure 1.3, DG resources consists of conventional and non-conventional generation types. 
Conventional generation types such as diesel powered generators are a common means 
of back-up power that provides quick start up and power production. Conversely, diesel 
generators are inefficient, produce greenhouse gas emissions, and are costly [6], [11]. Non- 
conventional generation types such as photovoltaic Photovoltaic Cell (PV) generators and 
wind turbine generators support renewable energy initiatives that result in zero emissions 
and require no additional fuel costs [6]. While renewable energy sources provide many 
benefits, they are each dependent to their unique environments [6]. 


A microgrid's power distribution system is the means by which "energy [is transmitted] 
between generation sources, the grid, energy storage systems, and loads" [3]. Three primary 
distribution systems that microgrids utilize are direct current Direct Current (DC) lines, 
alternating current lines Alternating Current (AC), and high frequency AC lines [12]. 
In all three distribution systems, common elements such as distribution cabling exist. 
Underground power lines that are directly buried underground are one means of distributing 
power with all three systems. Overhead power lines and buses carry generated power 
between utility poles and a microgrid system as well [3]. Unlike underground cabling, 
overhead cabling remains exposed and vulnerable to damage or deterioration. Additionally, 
transformers and DC-AC converters are utilized within power distribution systems as a 
power conversion elements and connectors [3], [8]. Lastly, distribution systems require 
the use of switches to regulate the direction and load of power being transmitted between 
systems [13]. 


Microgrids are a desirable means of energy production and usage for the DoD because to 
their ability to store energy for emergency use, maintaining energy consistency, and allow 


for islanded operations among many more reasons. Microgrids are essential in supporting 


certain facilities like those found in the military and medical installations [3]. The primary 
purpose of an Energy Storage Systems (ESS) is to balance the generated power from DG 
resources and its power demand [14]. Figure 1.3 shows the variation of energy storage 
options that can be utilized within a microgrid infrastructure to include: Battery Energy 
Storage, flywheels, Superconducting Magnetic Energy Storage (SMES), Compressed Air 
Energy storage (CAES), and Pumped Storage (PS) [9]. Microgrid systems use ESS for 
system stability by alleviating incidents of overvoltages and undervoltages due to power 
generation fluctuations from certain DG resources. These fluctuations occur because of 
different load demands such as various time demands such as working hours and non- 
working hours, as well as various environments such as cool nights and hot summer days [6], 


[8]. 


A microgrid controller monitors and controls all component functions within a microgrid 
architecture [10]. Microgrid controllers function with explicit commands and ensures power 
quality and reliability [6], [10]. As the overarching control system, microgrid controllers 
manage and command DG resources, stored power loads, and the power distribution system 
[6], [8]. The microgrid controller is capable of regulating the power flow and connection 
state between the entire system and any connection to an external utility power system [15]. 
Giachetti et. al. [3] explains how microgrids can be classified as one of three levels of 
authority: primary controls, secondary controls, and tertiary controls. Primary controls 
regulate available power with generators and storage systems by monitoring local voltage 
and current readings. Secondary controls coordinate microgrid generation and storage 
capabilities. Tertiary controls regulate the power that is distributed to and from the local 
utility power system [3]. Microgrid controllers are designed in either a centralized or 


decentralized control framework that can customize power delivery [16]. 


1.4.2 Microgrid System Description 
This thesis leverages the system architecture and system model as used within Peterson's 
work [8]. The microgrid system architecture utilized in [8] represents a generic DoD 


installation microgrid infrastructure with following major components included: 


* DG in the form of diesel generators and a PV array 


* Energy Storage in the form of a chemical battery 


• A connection to the utility grid through а substation 
* А distribution system made up of a mix of overhead and underground lines 


* Facilities of various uses and sizes 
Figure 1.4 displays the one line diagram of Peterson's microgrid architecture [8] that is also 


used in this thesis. 
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Figure 1.4. One-Line Diagram for a DoD Microgrid System. Source: [8]. 


1.5 Purpose of Microgrid Recovery Actions 
In an effort to build resilience within modern microgrid infrastructures, tested and proved 


recovery procedures can provide a quick and efficient means of restoring degraded systems 


back to normal operations. Similarly, the utilization of recovery actions can alleviate power 
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congestion that is placed оп microgrids that require certain power loads to support critical 
equipment or facilities [6]. Van Bossuyt and O'Halloran point out that routine recovery 


procedures can “prevent incipient failure from causing a system-wide failure" [17]. 


While there are many advantages in utilizing recovery procedures for microgrid restoration, 
there are also many challenges can occur. The implementation of recovery procedures are just 
as vital as the recovery actions being used. As discussed by Spranca, Minsk, and Baron [18], 
cognitive thinking factors such as omission and commission play a significant role in an 
operator ability to successfully recover a system or further degrade it. Another challenge 
for implementing recovery procedures is potential of emergence within the microgrid. It is 
important for facility managers to be cognisant of their microgrid infrastructures and the 
recovery procedures to be used so that when implemented, little to no further disruptions 
arise within the system or connected systems when being restored. Woods [4] also explains 
that the recovery, or rebound, of a system involves the "process of adapting to disruptions" 
over time since a system does not become stagnant when disrupted. With that in mind, 
systems must learn from past lessons to adapt to new challenges or disruptions. Additionally, 
it is important to remember that while the primary goal is to preserve the microgrid system 
when disturbed, the process of adapting to other disturbances continues to transform for 
both the system and the environment over time [4]. Woods provides this thought not just 
for rebound of a system, or even recovery procedures specifically, but also to emphasize 
that resilience thinking is continuous and must consider "systems, linkages, thresholds, and 


cycles...and [what drives them]" over time [14]. 


1.6 Threats to DoD Energy Security 

For DoD installations, various types of energy threats and attacks have potential to degrade 
military readiness and effectiveness. In order to combat this, the DoD must anticipate 
possible threats to energy security and plan for rapid response and recovery in order to 
maintain mission readiness. The DoD has set its chief priority “То ensure mission readiness 
of the armed forces by pursing energy security and resilience" [2]. Energy security threats 
for the DoD can be in form of hostile attacks, natural disasters, and technical energy system 
failures. For the United States (U.S.) Marine Corps (USMC), the maximum autonomy time 
for installation energy systems is 14 days so minimal impact is taken on critical mission 


areas [19]. For U.S. Navy (USN), the maximum autonomy time is seven days [20]. 
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Microgrids оп DoD installations have become targets for various types of hostile attacks. 
Intentional physical attacks, such as terrorist attacks, can pose a significant threat to DoD 
energy security by degrading critical power infrastructures such as telecommunication 
sites that are essential for mission readiness [21]. Additionally, cyber-attacks can pose a 
significant threat to DoD energy systems by degrading a system's network and control 
capabilities [21]. External and internal cyber-threats, such as denial of service attacks, can 
disrupt normal operational services within DoD networks [21]. The DOE has found that 
major attacks or incidents of these kind can create significant DoD issues such as loss of 
personal identification information, critical performance data, or lack of support services to 


name a few [21]. 


Natural disasters and severe weather, such as hurricanes, are another type of energy security 
threat that can cause similar damage to the physical infrastructure of DoD installation 
microgrids and local utility grids. High winds and strong weather that result from hurricanes 
or blizzards can damage essential energy support infrastructure such as power lines and 
distribution centers. As the primary cause of grid disruptions, severe weather can cause 
regional grids to be either degraded or limited in their operations, resulting in short to 
long term power outages [21]. Power outages due to severe weather can pose significant 
operational threats to DoD installations. Restoration planning for both the installation's 
microgrid infrastructure and its local utility connections must be considered together since 


the both systems work together. 


Energy infrastructures for DoD installations are also susceptible to degradation of their 
own energy backup sources, such as microgrids for local utility power. Most if not all 
energy systems on DoD installations receive primary power from local utility grids and 
rely on them to maintain normal energy operations. Local utility grids are dependent on 
the availability and reliability of their own infrastructures and sub-systems within them. 
Similarly, the DOE acknowledges that DoD energy systems, such as microgrids, are subject 
to the same security and resilience vulnerabilities in terms of reliability and availability of 
their systems and sub-systems [21]. The DoD must ensure that their microgrid infrastructure 
designs are capable of supporting the electrical loads required of them. Microgrids need to 
be well designed in all aspects of system suitability, to include reliability and availability, 
to name a few. Regardless of local utility power availability, if sufficient design parameters 


aren't built within a microgrid system or its components, the microgrid itself can lose its 
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operability to create, distribute, or store power [22]. 


1.7 Chapter Summary 

This chapter has discussed the background and need for improving energy resilience of DoD 
installation microgrids. Specifically, this chapter presents the thesis question as to whether 
human factors impact the rebound, or recovery time, of degraded microgrids. The follow- 
on chapters analyze the effect of a HRA on microgrid recovery procedures and system 
recovery time. Chapter 2 includes a literature review of microgrid resilience work, recovery 
procedures, and human factors. Chapter 3 introduces the HPIRA tool developed with an 11 
step methodology process. Chapter 4 applies the HPIRA tool to various microgrid recovery 
processes to analyze the effect of human factors on recovery time. Chapter 5 concludes this 
thesis with a summary of findings, recommendations, and propositions for future and follow 


on work. 
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СНАРТЕК 2: 


Literature Review 





This chapter presents a literature review of previously conducted research work on mi- 
crogrid resilience and its role within energy security. Within this chapter, each subsection 
will analyze different research topics, including resilience theory, recovery modeling, and 
human reliability models for including humand factors in recovery processes. This literature 
review identifies and presents gaps within current research and revels additional research 
questions on each topic. Each topic is evaluated for context, purpose, and added value of po- 
tential research work to improving microgrid resilience research. Synthesized together, the 
literature review provides a clear understanding and identification of research gaps within 


previously published works. 


21 Definition of Resilience 

Resilience has various definitions within literature. Depending on the purpose of the def- 
inition, one definition of resilience may differ considerably from another. For instance, 
the American Society of Mechanical Engineers American Society of Mechanical Engi- 
neers (ASME) considers resilience from an engineering perspective. The ASME defines 
resilience as “Ше rapid return to full function after those events that occur" [23]. Resilience in 
a psychology perspective is defined as “good, stable, and consistent adaption [of individual 
behaviors] under challenging conditions" [24]. Due to the differences of resilience defini- 
tions, it is important to choose the best fitted definition for a specific research application 


so that the research is properly conducted to achieve a useful outcome. 


U.S. Government agencies and organizations define resilience differently from their civil- 
ian and commercial counterparts, primarily because of the nature of government work 
and services. For instance, DoD installations fall under the resilience definitions found in 
the Department of Defense Instruction (DoDI) 4170.11, 10 U.S. Code $ 101(e)(6) and 
10 U.S. Code $ 101(e)(8). DoDI defines energy resilience as "the ability to prepare for 
and recover from energy disruptions that impact mission assurance on military installa- 
tions" [25]. Specific to military installations, 10 U.S. Code $ 101(e)(8) defines military 
installation resilience as “Ше ability to avoid, prepare for, minimize the effect of, adapt 
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to, and recover from anticipated апа unanticipated changes" [26]. While these instructions 
provide strategic guidance to energy security on DoD installations, they lack the detailed 
focus on energy resilience. Establishing energy resilience will ensure that DoD installations 
are capable of preparing and recovering from local utility power interruptions to support 
mission assurance and installation energy security [8]. While the DoD provides overarching 
guidance and requirements, individual military services and federal departments establish 
specific instructions for their respective services or departments to follow [8]. Following 
DoD guidance, the USN seeks to improve energy security by means of improving resilience, 
reliability and efficiency with a required maximum autonomy metric of seven days [20], 
[27]. 


Over time, various definitions of resilience have developed across various domains. While 
there are many domains for resilience, four particular domains are considered in a research 
perspective: Organizational, Social, Economic, and Engineering [28]. Determining the 
definition of resilience in an engineering domain best suits the goal for this thesis. Unlike 
other domains, the engineering domain involves technical systems, human interaction, and 
technology [28]. Engineering resilience has been defined as a system's "ability to anticipate 
and adapt from a surprise or failure" [29]. Similarly, engineering resilience is also described 
as knowing the normal functionality of a technical system so that if it fails, one will 
understand how it fails [28], [30]. 


While various definitions of resilience exists, Woods' [4] categorization of four resilience 
concepts best defines this work's research on microgrid resilience. Rather than defining 
resilience in terms of variables or as one general concept, Woods defines resilience as four 
concepts that each contribute to the entirety of resilience: Robustness, Rebound, Extensi- 
bility, and Sustained Adaptability [4]. By assessing resilience within these four concepts, 
progress and projection can be assessed within each category in order to build resilience 
within systems and networks [4]. For this work, focus on the concept of rebound guides 
the research to query “what is needed in advance of a challenge event...and how systems 
continue to change as they adapt, as well as how systems provoke changes through adap- 
tation" [4]. Unlike previous definitions of resilience that focuses on reactive actions to a 
degraded system, Woods' definition forces the thought of what is required of a system prior 
to a disruptive event, and from there, how can one best prepare for that event to minimize 


the disruption. For the purpose of this research, predetermined recovery procedures will be 
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assessed prior to a microgrid system recovery in order to evaluate the effectiveness in its 


contribution towards the system's “rebound.” 


2.2 System Recovery Procedures 

Resilience, along with reliability and efficiency, are the DoN's primary objectives for energy 
security in order to ensure mission readiness [1]. With constant technological innovation 
for military weapons and base supplies and services, the DoD is becoming more reliant on 
installation energy support. For those reasons, it is imperative that DoD installations adapt 
to become as resilient, reliable, and efficient in their energy production and sustainment. 
While there has been research conducted on improving resilience within microgrid systems 
from different approaches, none specifically have focused on operator recovery procedures. 
For instance, Peterson's work assess the Expected Life Cycle Mission Impact (ELMI) 
metric in design considerations to improve of DoD microgrid resilience [8]. Hildebrand's 
Work assesses cost estimation of DoD microgrid resilience based off of microgrid design 
and sustainment utilization [31]. Most resilience research has analyzed microgrid system 
designs and specifications as well as impacts from other factors such as life cycle costs, 
system redundancy, and maintenance management. Like most design efforts, improvements 
and modifications to microgrid systems are developed as a result of failures to improve 


system operability. 


For most military operational systems, pre-planned responses or casualty control actions 
have been established in an attempt to minimize degradation and damage of a system. Ad- 
ditionally, those responses and actions reduce the time that the system is out of commission 
to improve the rebound of that system. Following Woods [4] and Hollnagel's [30] definition 
of resilience, proactive actions should be considered prior to disruptive events in order to 
improve the rebound of a system. By implementing this concept, research can focus more on 
increasing the number of things that can go right rather than trying to reduce the number of 
things that go wrong [30]. The concept of being proactive rather than reactive in improving 
system resilience allows for the stakeholders of the system to anticipate possible failures 
and develop and actions to prevent them. This thesis will simulate various sets of recovery 
procedures for degraded microgrids to identify factors that improve rebound or the factors 
that inhibit it. 
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The concept of being proactive rather than reactive in building resilience prepares system 
operators, maintainers, and managers to mitigate potential degradation issues of microgrid 
systems. In many cases, established recovery procedures have been created and implemented 
on DoD installations to improve the rebound of a microgrid system by focusing on reducing 
recovery time. For instance, at the United States Marine Corps (USMC) Air Ground Combat 
Center United States Marine Corps (USMC) Air Ground Combat Center (MCAGCC) 
Twentynine Palms, attempts have been made to improve microgrid system recovery times 
by use of recovery procedures [32]. Similarly, the USN utilizes established Engineering 
Operational Casualty Control procedures for specific equipment in recovery efforts on 
naval vessels and shore installations. The private sector follows similar efforts to decrease 
recovery times based on recovery operations from experienced linemen and cablemen. 
References such as The Lineman's and Cableman's Field Manual [33] provide general 
operating and recovery guidance for microgrid system components. Even for Naval Facilities 
Engineering Command (NAVFAC), various sets of recovery procedures are required to 
properly reestablish normal conditions for a degraded system [32]. Since degradation can 
be a result of multiple factors, various sets of recovery procedures need to be assessed to 
best restore degraded microgrids. Factors such as varying weather conditions, critical load 


requirements, and modifications of recovery procedures need to be considered. 


Many assume that implementing standardized recovery procedures will guarantee improved 
rebound and resilience of microgrid systems. That assumption, however, is not necessarily 
always true. In this thesis, the argument is raised that no, recovery actions do not ensure 
improved resilience of microgrid system and can potentially further degrade the system. 
The primary factor in testing this hypothesis will be assessing human reliability, in the form 
of human error, within the recovery procedures used for recovering a degraded microgrid. 
With a HRA applied to recovery procedures, a reliability analysis will be conducted to see 
at what recovery time durations do recovery procedures become more beneficial or more 


harmful to a recovery process. 


2.3 Human Reliability Analysis 
When implementing any kind of pre-planned responses such as recovery procedures to 
restore microgrid systems, the effectiveness of those responses depend the human reliability 


of the actions or tasks being taken to restore a systems. The underlying assumption is that 


18 


recovery actions improve а system's ability to recover. However, when considering the 
human factor, that assumption is not always the case because human beings are not perfect 
and make mistakes. What needs to be considered in a recovery process is if the mistakes 
or actions being completed are by omission or commission. When evaluating a scenario 
to determine if recovery procedures improve certain metrics like recovery time and speed, 
understanding human reliability can potentially improve those recovery metrics or further 


degrade them. 


Human cognition is how a person gains and uses knowledge to participate in reasoning 
and remembering [34]. Since human cognition is primarily a psychological topic, is not 
always considered within engineering research. To evaluate the effectiveness of recovery 
procedures, an operator's human cognition must be considered in addition to the recovery 
tasks themselves because they both contribute to the overall success of the recovery task. 
From the perspective of a microgrid operator tasked with repairing a part of the system, 
omission and commission must be considered as contributors to human error since both can 
potentially limit or worsen the restoration of a system. Acts of omission “тау result from 
ignorance" and acts of commission may "involve more malicious motives and intentions," 
therefore, each recovery task carries a risk of complications that can result from human 
error [18]. What is unknown is how much human error can be anticipated in affecting a 
task so much that it fails, which could result in limitations or further delay in recovering a 
system. For complex recovery procedures, human operators will always have some degree 
of omission and commission in their thought process or actions that can very well influence 
their performance on a task. Those influenced tasks can result in a faster or slower system 


recovery, or it could also cause additional failures within the system. 


In every decision and action a person takes, human error can occur. One way to measure 
human error is to conduct a HRA. Human reliability is a challenge to asses because human 
factors are not predictable and are difficult to improve [35]. Events such as the 2011 
Southwest Blackout is an example of one of the United States' largest power failures. The 
outage was a result of human error that created multiple cascading failures [36]. Various 
analysis methods were used to to find the root cause failure but ultimately it became prudent 
for investigators to conduct HRAs. For a HRA, many forms of analysis methods exist. 
The Technique for Human Error Rate Prediction (THERP) method was initially utilized 
for the U.S Nuclear Regulatory Commission [37]. While the THERP method provides an 
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effective means of determining human reliability, it is known to require in depth training 
and experience for it to be correctly implemented. A similar method, the Accident Sequence 
Evaluation Program Human Reliability Analysis Procedure (ASEP) [37], provides results 
that are similar in quality and effectiveness as THERP, but in a simpler and more efficient to 
complete [37]. The Standardized Plant Analysis Risk-Human Reliability Analysis (SPAR-H) 
method [37] was derived from both THERP and ASEP methods to create a simple and 
generalized method for determine HEP [38]. While all methods are effective in determining 
human reliability and error, each of the methods' applications and purposes serve different 
needs and consider different constraints. As shown in [35], SPAR-H is an appropriate 
and effective method for a power grid environment HRA because of its simplicity and 
consideration of multiple performance factors. For the same reasons and desired goals, the 
SPAR-H method will be utilized for this thesis’ HRA analysis. 


2.3.1 SPAR-H 

As a simple and proven method, SPAR-H has become a common HRA approach in de- 
termining human reliability for various systems in different scenarios. For the SPAR-H 
method, each task, or Human Failure Event (HFE), is categorized as a Diagnosis and/or 
Action event. Each diagnosis/action HFE is then rated by the following eight performance 


shaping factors Performance Shaping Factor (PSF): 


1. Available Time: Level of Amount of time relative to the time that is available for the 
HFE being assessed 

2. Stress/Stressors: Level of undesirable conditions in completing the HFE being as- 
sessed 

3. Complexity: Level of evaluating performance challenges an HFE being assessed, to 
include both the HFE and its operating environment 

4. Experience/Training: Level of operator experience and/or training of the НЕЕ being 
assessed 

5. Procedures: Level of available operating procedures for the HFE being assessed 

6. Ergonomics/Human-Machine Interference: Level of adequacy of human-machine 
interfaces of the HFE being assessed 

7. Fitness for Duty: Level of the HFE operator’s physical and mental conditions in 


conducting the HFE being assessed. 
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8. Work Processes: Level of management support and policies that are used for Ше НЕЕ 
being assessed [39]. 


Each PSF is assessed individually and separately on how they impact an individual HFE. 
What is unique to SPAR-H over other HRA methods is that the eight PSFs can result in 
either positive or negative effects on performance [39]. Evaluating each PSF in this way 
ultimately determines the final Human Error Probability (HEP) that represents the given 
HFE. In Figure 2.1, HEP is represented as an output function of a single PSF input variable. 
The relationship shows that better performance of a PSF results in a lower HEP value, or 
lower P(f), of an HFE. In the opposite case, having more error involved with the PSF being 
assessed results in a larger HEP, or greater P(f), value. 


Greater human error 
кону 
1. 







Stronger error 
causing effect 
of the PSF 





Stronger performance 
enhancing effect 


of the PSF Nominal error rate 


(1.0 E-2 for diagnosis, 
1.0E-3 for actions 


Lower human error 
probability 
1E-5 


Figure 2.1. HEP as a Function of a PSF Variable. Source: [39]. 
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In [37], SPAR-H worksheets are included to guide the PSF ratings for At-Power conditions. 
The worksheets walk a user through the PSF ratings to calculate each HFE's HEP, or P(f). 
For the purpose of this thesis, At-Power conditions will be used because they provide a 
more conservative approach that is designed for conditions in which emergency operating 


procedures are utilized [37]. 


2.4 Chapter Summary 

This chapter provided a review of literature that relates to the thesis question and the 
implemented research. Focus was placed on previously conducted microgrid resilience 
Work, recovery procedures, and human factors. Chapter 3 introduces the HPIRA tool used 


to assess the impact of human factors on microgrid recovery times. 
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СНАРТЕЕ 3: 
Research Method 





This chapter presents the research methodology to assess the effect of human factors on 
microgrid recovery procedures and system resilience. The methodology developed herein 
involves 11 steps that lead to the development of the HPIRA tool. The logic and need for 
each step is detailed and explained below. This methodology will be applied in Chapter 4 
to measure the effect human error has on the recovery time of microgrid infrastructure and 


a representative Naval Station (NAVSTA) microgrid system. 


3.1 Methodology Description 

This section describes the research methodology used in this thesis. The methods presented 
here were developed through an iterative process that evaluated the effectiveness and purpose 
of each step to answer the thesis question. The methodology includes existing tools and 
data inputs from [8] to include resource data, microgrid system architecture, and microgrid 


system simulation programming. The 11 step HPIRA process are as follows: 


. Define Microgrid Component of Interest 

. Determine Recovery Procedure for Microgrid Component of Interest 

. Perform Stakeholder Analysis 

. Create the Precedence Order of the Recovery Task List 

. Apply SPAR-H and Determine HEP values for all Tasks 

. Choose the Appropriate Probability Distribution for Duration Sampling 
. Find Individual Task Duration based on chosen Probability Distribution 
. Find АП Possible Task Network Paths and Duration 

. Determine Critical Path and Duration of Task Network 


© боб м Сс мл A ошо мю н 


- 
о 


. Simulate and Analyze Component Recovery Duration 
. Conduct and Analyze a Back of the Envelope (BOE) Total Duration Calculation for 


— 
— 


а Multi-Component Failure Events 
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3.1.1 Step 1: Define Microgrid Component of Interest 
In this step, the microgrid component failure scenario needs to be chosen and defined. Each 
scenario needs to include the following: 


1. Description of scenario background 
2. Definition of the microgrid architecture 


3. Statement of assumptions 


Describe the scenario background to include environmental conditions that can affect mi- 
crogrid operations. For instance, note extreme weather conditions and/or extreme load 
demands. Define the microgrid architecture so that all possible components can be assessed 
as a cause of failure to be analyzed. Additionally, determine the microgrid system's operat- 
ing mode so it can be established as the recovery benchmark. State all assumptions within 
the scenario environment, microgrid system operation, and microgrid system design. In- 
clude the complexity of the microgrid system as well as the available support services. By 
clarifying these scenario details, simulation results can be analyzed for true and meaningful 
conclusions for stakeholder interests. Finally, for DoD installation microgrids, ensure that 


all details remain within Distribution A classification. 


Example: Microgrid Component of Interest 
Assume a single microgrid component degrades a microgrid in island mode. Choose a 


microgrid component to be assessed as the degraded component of interest. 


3.1.2 Мер 2: Determine the Recovery Task List for the Microgrid 
Component of Interest 

When Step #1 is complete, determine the system recovery procedure tasks list based on the 
root cause of failure within the microgrid infrastructure. Utilizing procedure guidance such 
as “Тһе Lineman's and Cableman's Field Manual" [33] and/or referring to subject matter 
experts such as facility utility managers and facility engineers, create a task list in order of 
sequential completion. Additionally, note the minimum, median, and maximum duration 
time estimations for each task completion. Next, note which tasks are predecessors of other 
tasks. 
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Example: Recovery Task List 
The recovery procedure set, or task list, that will be evaluated is found in Table 3.1. АП 


tasks will be named sequentially from Task “А” to Task “F.” 


Table 3.1. Example Recovery Procedure Task List and Durations (hr) 








Recovery Task Min | Max | Mean | Follow On Task 
Task A 0.50 |100 |150 | B,D,E 

Task B 2.50 |3.00 1350 |С 

Task C 0.50 |100 |150 Е 

Task D 3.00 |5.00 |7.00 |F 

Task E 3.50 |4.00 |4.50 Е 

















3.1.3 Step 3: Perform a Stakeholder Analysis 

To determine the recovery team members, or those who will be participating in the task list 
recovery procedures, create a stakeholder analysis matrix. List all individuals or services that 
participate in operating, supervising, and supporting DoD microgrid systems. Additionally, 


include the stakeholders' specific interests and estimated impact level. 


Example: Stakeholder Analysis 

Consider a recovery team manager that needs to restore the microgrid system with three team 
members. The members will complete the five tasks presented in Table 3.1 to successfully 
restore the system. The assumptions for the scenario are: 1) Team members are fully trained 
and capable of completing tasks, 2) Team members are fully supported and equipped to 


complete tasks, and 3) Environmental conditions are ideal for efficient task completion. 


A stakeholder analysis of the given scenario is shown in Table 3.2. Refer to this stakeholder 


analysis to identify recovery team members and additional stakeholders. 
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Table 3.2. Example System Stakeholder Analysis 








Stakeholders Interest Est. Impact 
Manager Supervisor of operating team High 
Senior Team Member Lead team member in operation High 

Team Member Team member in operation High 
Supply Team Provides resource support Medium 











3.1.4 Step 4: Create the Precedence Order of the Recovery Task List 

Referring to the recovery task list as generated in Step #2 and with consideration of the 
recovery team, walk through the generated task list and determine which tasks show depen- 
dency of completion on others. Document this dependency as a precedence list showing 
how the completion of one node initiates another. Specify this precedence with “From” and 
“То” nodes until the last node. The starting node will be the initial task and the final node 


will be the recovered task. 


Example: Precedence List 
Follow each recovery member and task completion dependency to determine the precedence 


order of each node task. Table 3.3 summarizes the precedence order. 
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Table 3.3. Example System Precedence List 








From To Avg. Duration (hr) 
A B 1.00 
B C 4.00 
A D 1.00 
A E 1.00 
C F 1.00 
D F 3.00 
E F 4.00 











3.1.5 Step 5: Apply SPAR-H and Determine HEP Values for all Tasks 
The next step is to evaluate the effect of human cognition on the successful completion of 
each recovery task, or HFE. Human cognition can be attributed to two thought processes: 
Omission and Commission. For the purpose of this work, actions/tasks/events will be of 
omission because it will be assumed that any error that takes place is not intentional. To 
determine the human error by omission, apply the five-step SPAR-H analysis to each task. 
The result of the SPAR-H analysis for each task is the HEP value for each task. The HEP 
value represents the P(f) of that task given the impact of human error. Refer to [37] for the 
SPAR-H worksheets and follow guidance as described. For the purpose of this work, the 
At-Power worksheets will be utilized for a more conservative analysis. The five-step process 
of the SPAR-H worksheets is as follows: 


. Categorize the task being assessed as "Diagnosis" and/or "Action" 
. Rate each PSF for the task being assessed 
. Calculate the PSF-Modified HEP for the task being assessed if applicable 


. Account for dependence of the task being assessed 


л A ошо го н 


. For all completed tasks, calculate the the final HEP based on dependence between 
tasks 


Apply the first four steps of SPAR-H analysis to each task within the network task list. 


27 


Once all tasks analyses are complete, follow step #5 and calculate the total network HEP as 
instructed in the SPAR-H worksheets. 


Example: HEP Calculation for Task A 

Conduct a SPAR-H analysis on Task A. Follow the SPAR-H analysis guide in [37] for At- 
Power conditions. First, Task A will be categorized and evaluated as a Diagnosis task and 
an Action task to determine its HEP. Eight PSFs will then be rated for both the Diagnosis 
HEP and Action HEP calculations with respect to Task A. Tables 3.4, 3.5, and 3.6 show the 
chosen ratings and associated multipliers for each rated PSF and task dependency. 


Table 3.4. Example Diagnosis PSF Ratings for Task A 














PSF Level Multiplier 
Available Time Nominal 1 
Stressors Nominal 1 
Complexity Nominal 1 
Experience High 0.5 
Procedures Nominal 1 
Ergonomics/HMI Nominal 1 

Fitness for Duty Nominal 1 

Work Processes Good 0.5 
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Table 3.5. Example Action PSF Ratings for Task А 








PSF Level Multiplier 
Available Time Nominal 1 
Stressors High 2 
Complexity Nominal 1 
Experience High 0.5 
Procedures Nominal 1 
Ergonomics/HMI Nominal 1 

Fitness for Duty Nominal 1 

Work Processes Good 0.5 











Table 3.6. Example Task Dependency Rating for Task A 





Dependency on Previous Task 


Final P(f) 





Zero 





P(f) = HEP 





Follow the calculation in the SPAR-H worksheets to include Diagnosis HEP, Action HEP, 
and dependency categorization to determine the final HEP value for Task A. АП final HEP 


values for all five tasks are summarized in Table 3.7. 
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Table 3.7. Example HEP Values for all Tasks 








Task Final HEP 
Task A 0.02 
Task B 0.51 
Task C 0.07 
Task D 0.06 
Task E 0.53 








3.1.6 Step 6: Choose the Appropriate Probability Distribution for Du- 
ration Sampling 

Review all possible types of probability distributions and choose the most appropriate 

distribution for the work being assessed. For the purpose of this work, a continuous variable 

(duration) will be monitored as well as its minimum/mean/maximum parameter values. The 

probability distribution will determine stochastic duration times to be utilized in individual 

task duration calculations. In [40], the following recommendations and descriptions of 


failure analysis probability distributions are: 


* Weibull Distribution 

* Normal Distribution 

* Lognormal Distribution 
* Exponential Distribution 


Example: Probability Distribution 

Each tasks' duration time will initially be based on mean duration values. Additionally, the 
duration time will be depend on the SPAR-H analysis to determine if the task has a higher 
P(f) or P(s) of completion. For evaluating a randomly generated or stochastic duration 
values, an exponential probability distribution would best suit the P(f) analysis [40]. 
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3.1.7 Step 7: Find the Individual Stochastic Task Durations based on 
chosen Probability Distribution 
First, generate a random number based on the probability distribution chosen in Step #6 for 


the task being completed. Use the mean duration time from Table 3.1 as the mean parameter. 


Next, generate two probability distributions representing P(f) and P(f) of each task being 
completed. Use Table 3.1's minimum and maximum duration values as the mean parameter 
values for the P(f) and P(f) distributions. The P(f) distribution will use the mean low, or 
minimum duration value, as the mean input parameter. The P(s) distribution will use the 


mean high, or maximum duration value, as the mean input parameter. 


Compare the task's generated random number against its HEP value found in Step #5. When 
the generated random number is greater than the HEP value, apply the P(f) distribution to 
find the task's sample duration. When the generated random number is less than the HEP 


value, apply the P(s) distribution. 


Apply this process to each task in Table 3.1 to generate new sample duration values for each 
task. 


Example: Task A Duration Sample 
Based on an exponential probability distribution and values from Table 3.7, calculate each 
task's sample duration. Table 3.8 summarizes a sample duration value set for each task or 


node. 


Table 3.8. Example: Probabilistic Sample Duration for each Task 








Recovery Task Sample Duration (hr) 
Task A 0.33 
Task B 1.30 
Task C 0.18 
Task D 0.97 
Task E 4.35 
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3.1.8 Step 8: Find АП Possible Task Network Paths and Duration 
Create a network diagram that represents the task network in the precedence order as 
determined in Step £4. To do this, refer to each task as a named node in sequential order. 
Graphically demonstrate the precedence order with the named nodes and directional arrows. 
Next, map out all possible network paths from beginning task to the end task. Record all 
possible tasks that can be completed. 


Example: Network Diagram with АП Possible Paths 

Referring to Step £4, create a network diagram using the network tasks. Starting with Task 
“A,” three possible recovery paths can be taken to the final node, Task “F.” Figure 3.1 shows 
the task network where three possible network paths exist: 1) ABCDF, 2) ADF, 3) AEF. 


Figure 3.1. Recovery Procedure Task Network Diagram 


For each possible path, calculate the total duration sum of all nodes within the path to 
determine the path duration. Remember to use the stochastic sample duration values from 
Step #7. To do this, refer to Table 3.8 and sum the duration values for the corresponding 


nodes within the path name. For example, for path "АВСЕ," the duration calculation is 


Durationapcr = Weight дов + WeightBroc + Weightctor. 
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Table 3.9 shows all possible paths and their duration within the network. Note that the 


duration values for each path are a summation of stochastic results for each task or node. 


Table 3.9. Task Network Paths and Duration 








Paths Duration (hr) 
ABCF 1.81 
ADF 1:20 
AEF 4.68 








3.1.9 Step 9: Determine Critical Path and Duration of Task Network 

Apply the CPM to identify the longest duration path from Step #7. The path with the longest 
duration represents the critical path, that when completed, assures that all other tasks have 
been completed as well. The critical path also identifies which tasks need to be completed 


and monitored for successful recovery completion. 


Example: Critical Path and Total Duration 
Refer back to Table 3.9 and identify the path with the longest duration. The recovery 
network's critical path is AEF with a duration of 4.68 hours. 


3.1.10 Step 10: Simulate and Analyze Component Recovery Results 

Apply Steps #1-9 to determine the critical path and duration of a given microgrid recovery 
task network. Apply a Monte Carlo Simulation of no less than 10,000 iterations so that 
stronger and more meaningful results can be analyzed. By applying multiple iterations to 
this simulation, duration samples can be randomly chosen to best predict the success of each 
task, path, and ultimately, critical path of a network being assessed. Create the following 


plots for further analysis and conclusions in Step #11. 
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Plot #1: PDF for the Modeled Recovery Scenario 

Create a histogram plot that shows the occurrence frequency of all 10,000 scenarios against 
the continuous variable, recovery time, to produce a Probability Density Function (PDF). 
Determine the bin that represents the highest frequency grouping and its associated recovery 
time range. Figure 3.2 shows the desired PDF with the red highlight representing the most 


common recovery time. 





1200 T T T T T T 


1000 


800 


600 


Frequency of Occurence 


400 


200 














0 10 20 30 40 50 
Recovery Time (hr) 


Figure 3.2. PDF for Modeled Recovery Scenario 


Plot #2: АП Possible Recovery Paths and Durations for 10,000 Iterations 

Create a line plot that presents the relationship of each path and its duration over all iterations. 
Set the input variable as each possible recovery path. Set the output variable to be each 
path's duration. Connect all data points in a line to represent each of the 10,000 iterations. 
Determine the most common, longest duration, path of all scenarios. Do this by rounding 
each scenario's longest recovery time up to the nearest integer. Then find the most common 


recovery time and the path that associates with it to determine the critical path. Figure 3.3 
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displays all possible recovery paths and their durations over each of the 10,000 iterations. 
This plot allows for the observation of shorter and longer recovery time points or ranges 
that correlate to specific recovery paths. Paths that are of longer durations, or are shown as 


greater recovery time points, will likely be critical paths for the recovery task network. 
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Figure 3.3. Duration Required to Recover a Component for 10,000 Modeled 
Scenarios 


Plot #3: PDF for Component Recovery's Critical Path 

Based off of the critical path determined in Plot #2, find the path duration for that path 
amongst all 10,000 scenarios. Create a histogram plot that shows the occurrence frequency 
of all 10,000 scenarios against the determined critical path recovery time to produce a PDF. 
Determine the bin that represents the highest frequency grouping and its associated recovery 
time range. Figure 3.2 shows the desired PDF with the red highlight representing the most 
common recovery time. 


35 


900 














800 - 

700 - 
8 
c 600 
Ф 
р”; 
9 
б 500 - 
5 
$ 400} 
= 
Ф 
5 
$ 300} 
LL. 

200 + 

100r 

0 
0 5 10 15 20 25 30 
Recovery Time (hr) 


Figure 3.4. PDF for Component Recovery Critical Path 


Assess Plot £1 and Plot 43 with Figure 3.5 to understand the distribution relationship 
between paths and durations. Figure 3.5 is a PDF of a component’s reliability over time 
with the red highlight representing the most common recovery time. As recovery time 
increases, the P(f) increases while the P(s) decreases. Consider possible factors or reasons 
that may attribute Plot #1 and Plot #3’s relationships to include SPAR-H PSFs. 
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Figure 3.5. PDF of Component Reliability over Recovery Time 


3.1.11 Step 11: Conduct and Analyze a BOE Total Duration Calcula- 
tion for a Multi-Component Failure Event 

Select microgrid component(s) to be assessed within a total microgrid restoration event. 

Develop a BOE calculation for the total microgrid system recovery duration. The calculation 

should summate individual component duration times for how ever many components are 

chosen to be degraded or failed. The individual duration times should correlate to the 

component’s iterated duration values from Step #10. Analyze total system recovery time 


and what factors led to it. 


This methodology establishes the HPIRA tool that determines recovery times for the most 
successful critical recovery paths within a recovery process task network. The HPIRA tool 
will be applied to six microgrid component recovery efforts in Chapter 4. Resulting recovery 


times will be considered man-hours needed for a successful microgrid recovery effort. 
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3.2 Chapter Summary 

This chapter described the 11-step methodology process to determine if human factors 
impact the rebound, or recovery time, of a degraded microgrid. Within the methodology 
process, the HPIRA tool was developed to assess the recovery of various microgrid com- 
ponent failures or degradations. The output metric of the HPIRA tool is the total recovery 
time or man-hours required to recover a microgrid system. Chapter 4 will apply the HPIRA 


tool to six different microgrid component recovery processes. 
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СНАРТЕЕ 4: 
Research Results 





The purpose of this chapter is to present the results of the HPIRA tool for various microgrid 
recovery scenarios. In this chapter, the research methodology as described in Chapter 3 will 
be applied to answer the original thesis question. The HPIRA tool will produce compara- 
ble recovery time statistics of different microgrid components to show how human factors 
affects a microgrid recovery process. Additionally, it will present the P(s) versus P(f) for 
a microgrid system recovery. The research question will be analysed in two perspectives: 
1) The influence of human factors on individual microgrid component recovery processes 
and 2) The influence of human factors on a multi-scale microgrid component recovery 
process. The results will be analyzed to provide meaningful conclusions and recommenda- 
tions for microgrid system recovery. This research utilizes firsthand, user data inputs from 


experienced microgrid recovery personnel. 


4.1 Individual Microgrid Component Recovery 

The methodology developed in Chapter 3 simulate individual component recovery processes 
to restore a microgrid to normal operations. Exponential distributions are selected to model 
P(f) and P(s) of all tasks within all generated network paths since they measure a continuous, 
random variable with high and low parameter values. Six individual microgrid component 
recoveries will be evaluated with the HPIRA tool: Downed Pole, Generator, Substation, 
Multicell Battery, PV, and Rechargeable Battery. The data for each component recoery 
model is based off of firsthand knowledge from [32] to determine an appropriate recovery 
task list and task order precedence. АП tasks are representative recovery actions that are 
found in [33]. 


We assume the following about the recovery scenario and team for each component recovery 
model and analysis. The component analyzed is part of a NAVSTA microgrid. It is the only 
component to fail. The indecent of failure is unintentional and specific to a single microgrid 
component. The recovery team is a fully qualified and rested 2-person team consisting of 
a High Voltage Supervisor and a Lead Electrician. Environmental conditions will be ideal 
and all tools and supplies are available and in supply. 
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4.1.1 Downed Рае Recovery 

For the downed pole recovery process, 18 recovery tasks, as shown in Table А.1, will be 
simulated as a recovery task network. The recovery task list includes all tasks and durations 
in Table 4.1. The recovery procedure task list identifies all tasks sequentially from Task “А” 


to Task “5.” Appendix A provides the generated precedence list of all tasks in Table A.2. 


Table 4.1. Downed Pole Recovery Procedure Task List and Durations (hr) 








Task | Min Max | Mean | Follow On Task 
A 0.15 |0225 |020 |В 

B 0.17 |025 | 0.21 C,D 
С 0.22 | 0.30 |026 [Е 

р 0.17 |025 |021 |E 

Е 0.17 |0.33 |025 |F 

Е 0.33 | 0.50 |042 |С,Н 
С 0.17 |0333 |025 |J 

Н 0.17 | 0.25 |021 1 

1 0.25 |0333 |029 |J 

] 0.50 |100 |075 | K,L 
K 0.25 | 0.33 |029 IL 

L 2.50 |3.50 |300 | M,N 
M 1.50 |2.50 |2.00 |N 

N 3.00 |4.00 |3.50 |O 

О 3.50 |450 |4.00 |О,Р 
Р 0.17 |025 |021 |К 

О 0.17 |025 |021 IR 

R 0.25 |0.33 |029 |S 

S 0.00 |0.00 | 0.00 

Total | 13.62 | 19.47 | 16.54 

















From the task list and task precedence order, 32 possible recovery paths can be taken from 
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the beginning node to the end, or “recovered,” node. Based оп the 10,000 iterated scenarios 
through the HPIRA tool, 10,000 path recovery sample times are produced for each of the 
32 paths. Appendix A displays Table A.3 which shows all 32 possible paths and the first 
five, of the 10,000, recovery sample times within the network. Figure 4.1 shows the downed 
pole recovery task network with all tasks represented as alphabetical nodes and all potential 


recovery paths from start to completion. 


By implementing CPM process to the downed pole recovery network, the path that sig- 
nificantly impacts a recovery's progression can be identified. Within the task network, 
individual task completions occur in a single direction as either parallel or in series. Not 
one single path represents all tasks to be completed for a full downed pole recovery. Instead, 
each path represents specific tasks that, when taken in order, are subject to the successful 
completion and length of completion time of each prior task. The path with the longest 
duration, or recovery time, is the critical path. The critical path represents the combination 
of the most complicated tasks and longest task recovery times that are involved within a 
microgrid system's recovery process. The critical path is important to identify because if 
any delay or obstruction occurs to the tasks within the path, the longest recovery duration 
will only be extended and will delay the successful restoration of the microgrid and the 


services it supports. 
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Figure 4.1. Downed Pole Recovery Network Diagram 


Figure 4.2 displays a PDF for the modeled downed pole recovery simulation. The plot 
summarizes the longest recovery times of each of the 10,000 scenarios by how often they 
occurred. Plotting the occurrence frequency against the continuous variable, recovery time, 
produces a PDF where the P(s) and P(f) of the downed pole recovery can be assessed with 
respect to recovery time. In Figure 4.2, the red highlighted bin represents the most occurred 
grouping of the longest path recovery times. 
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Figure 4.2. PDF for the Modeled Downed Pole Recovery Process. The Most 
Frequent Scenario Frequency Grouping is 606 of 10,000 Scenarios. The Mode 
Recovery Time Range is 13.0 to 14.0 Hours with a 0.06 Probability of Oc- 
currence. 


The greatest frequency occurrence bin represents the highest P(s) for a downed pole recovery. 
Therefore, the most successful restoration paths will take approximately between between 
13.0 to 14.0 hours to complete. Restoration path recovery times range from a minimum 
recovery time of 3.70 hours and to a maximum recovery time of 63.56 hours. Referring 
back to Figure 3.5, the P(s) and P(f) of recovery processes can be estimated in respect to the 
system's recovery time. For a downed pole recovery, paths with recovery times that range 
between 3.70 hours to 13.0 hours have a higher likelihood of success than failure. Paths 
with recovery times closer to 13.0 hours have the highest P(s) of recovery while paths that 
fall near the minimum recovery time have a lower P(s). In opposite, paths that range from 
14.0 hours to 63.56 hours have a higher likelihood of failure than success. Similar to the 
success ranges, path recovery times that fall near 14.0 hours have a less likely chance to fail, 
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but as the maximum recovery time of 63.56 hours is approached, the likelihood of failure 


increases. 


After conducting the modeled recovery of 10,000 downed pole recovery scenarios, all of 
the 10,000 longest recovery times were found to fall between 3.70 and 63.56 hours. Table 
4.2 compares statistical values between the predicted and modeled recovery scenarios. The 
predicted modeled scenario is based off of the initial task list that does not consider human 
error or task precedence. Since the modeled recovery scenario utilized is based off of 
SPAR-H analysis and is of stochastic nature, the values are expected to vary considerably 
from predicted values. 


Table 4.2. Recovery Time Statistics for Downed Pole Recovery 








Recovery Scenario Min | Max | Mean | SD Var 
Predicted 13.62 | 19.48 | 16.54 | 4.14 | 17.11 
Model 3.70 | 63.56 | 18.91 | 7.54 | 56.90 




















The modeled downed pole recovery simulation produces the longest recovery time for 32 
possible recovery paths for 10,000 scenarios. Figure 4.3 shows these outputs with common 
trends. In Figure 4.3, high and low recovery time ranges occur over certain recovery paths. 
Paths #1 to #8 and paths #17 to #24 produce the highest recovery time ranges that represent 
potential critical recovery paths. 
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Figure 4.3. Duration Required to Recover a Downed Pole for 10,000 Modeled 
Scenarios 


For the purpose of this work, paths with high peaks or ranges are most important since they 
likely represent critical paths. Paths #1 to #8 and paths #17 to #24 include certain tasks that 
lead to longer recovery times. This can be due to task complexity and long task recovery 
times. When these tasks are combined, factors such as complexity and task completion times 
drive the elongation of total recovery time. Critical paths drive the successful completion 
of the recovery network or process. When assessing all 10,000 downed pole scenarios, Path 
#18 was determined to be the most common critical path. Figure 4.4 identifies the Downed 
Pole Recovery Network critical path, Path #18, and the path's associated recovery time. The 
nodes specified within that path are of significance since they have the greatest potential 
to slow down the recovery process. The recovery process is dependent on the critical path 
since the recovery completion is only as fast as the longest timed path within the recovery 
network. The longest recovery time durations are estimated to the nearest hour in order to 
determine mode value, or most frequent recovery time, that existed. The modeled recovery 
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time mode was determined to be 16 hours. Based off of the mode value, Path #18 is the 
critical path for the downed pole recovery model. It is important to note that the critical 
path is not necessarily the critical path for all of the pole recovery scenarios; however, it 
does dominate over the other potential paths. 

















Figure 4.4. Downed Pole Recovery Network Diagram Showing the Critical 
Recovery Path #18 with an Estimated Recovery Time of 16 Hours. 


With the critical path identified, the recovery time for that path was compared amongst 
all 10,000 recovery scenarios. Figure 4.5 is a PDF summarizing the relationship between 
all 10,000 recovery times and how often they occurred. This plot allows for assessment of 
whether Path #18 has a higher likelihood of success or failure in respect to recovery time. 
Figure 4.5 identifies the most occurred grouping of the 10,000 critical path recovery times 
with the red highlighted bin. 
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Figure 4.5. PDF for the Modeled Downed Pole Recovery Path #18. The 
Most Frequent Scenario Frequency Grouping is 605 of 10,000 Scenarios. The 
Mode Recovery Time Range is 13.0 to 14.0 Hours with a 0.06 Probability 
of Occurrence. 


For the downed pole critical recovery path, Path #18, recovery times that fall under 13.0 
hours have a have a higher likelihood of success than failure. Paths with recovery times 
closer to 13.0 hours have the highest P(s) of recovery while shorter paths have a lower 
P(s). In opposite, paths that range from 14.0 hours or longer have a higher likelihood of 
failure than success. Similar to the success ranges, path recovery times that fall near 14.0 
hours have a less likely chance to fail, but as the path's recovery time increases so does its 
likelihood of failure. 


4.1.2 Generator Recovery 
For the generator recovery process, 16 recovery tasks, as shown in Table B.1, will be 


simulated in the recovery task network. The task list includes all tasks and durations in 
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Table 4.3. The recovery procedure task list identifies all tasks sequentially from Task “А” to 
Task *Q." Appendix B provides the generated precedence list of the task list in Table B.2. 


Table 4.3. Generator Recovery Procedure Task List and Durations (hr) 





Min Max | Mean | Follow On Task 
0.15 |025 |020 |В 

017 |025 |021 |С 

0.08 |012 1010 | D,E 

0.08 |012 |010 [Е 

0.42 |0.67 |054 |F 





0.25 |0.50 |038 |G 
0.42 |0.67 |0.54 | HI 
017 |0333 |025 |J 
0.17 10.33 |025 |J 
0.17 |025 |021 |К 
0.25 |0.33 (|029 IL 
6.00 |12.00 | 9.00 | M,N 
0.25 | 0.50 | 0.38 |P 
0.17 | 0.25 | 0.21 |O 
0.33 | 0.50 10.42 |Q 
0.33 | 0.50 |042 |Q 


0.00 | 0.00 | 0.00 
940 | 17.57 | 13.48 


c Ed e US dM аласа саса аа = 
E x 

















From the task list and task precedence order, eight possible recovery paths can be taken 
from the beginning node to the end, or "recovered," node. Based on the 10,000 iterated 
scenarios through the HPIRA tool, 10,000 path recovery sample times are produced for 
each of the eight paths. Appendix B displays Table B.3 which shows all eight possible paths 
and the first five, of the 10,000, recovery sample times within the network. Figure 4.6 shows 


the generator recovery task network with all tasks represented as alphabetical nodes and all 
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potential recovery paths from start to completion. Like the downed pole task network, the 


generator recovery network's critical path is determined with the same CPM process. 
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Figure 4.6. Generator Recovery Network Diagram 


Figure 4.7 displays a PDF for the modeled generator recovery simulation. The plot summa- 
rizes the longest recovery times of each of the 10,000 scenarios by how often they occurred. 
Plotting the occurrence frequency against the continuous variable, recovery time, produces 
a PDF where the P(s) and P(f) of the generator recovery can be assessed with respect to 
recovery time. In Figure 4.7, the red highlighted bin represents the most occurred grouping 


of the 10,000 critical path recovery times. 
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Figure 4.7. PDF for the Modeled Generator Recovery Process. The Most Fre- 
quent Scenario Frequency Grouping is 629 of 10,000 Scenarios. The Mode 
Recovery Time Range is 8.0 to 9.0 Hours with a 0.06 Probability of Occur- 
rence. 


The greatest frequency occurrence bin represents the highest P(s) for a generator recovery. 
Therefore, the most successful critical restoration paths will take approximately between 
between 8.0 to 9.0 hours to complete. The critical restoration path recovery times range 
from a minimum recovery time of 1.79 hours and at a maximum recovery time of 121.8 
hours. Referring back to Figure 3.5, the P(s) and P(f) of recovery processes can be estimated 
in respect to the system's recovery time. For a generator recovery, paths with recovery times 
that range between 1.79 hours to 8.0 hours have a higher likelihood of success than failure. 
Paths with recovery times closer to 8.0 hours have the highest P(s) of recovery while paths 
that fall near the minimum recovery time have a lower P(s). In opposite, paths that range 
from 9.0 hours to 121.8 hours have a higher likelihood of failure than success. Similar to 


the success ranges, path recovery times that fall near 9.0 hours have a less likely chance 
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to fail, but as the maximum recovery time of 121.8 hours is approached, the likelihood of 


failure increases. 


After conducting the modeled recovery of 10,000 generator recovery scenarios, all of the 
10,000 longest recovery times were found to fall between 1.79 and 121.8 hours. Table 4.4 
compares statistical values between the predicted and modeled recovery scenarios. Like the 
downed pole recovery scenarios, modeled recovery values are based off of SPAR-H analysis 
and are of stochastic nature, resulting in values that are expected to vary considerably from 


predicted values. 


Table 4.4. Recovery Time Statistics for Generator Recovery 








Recovery Scenario Min | Мах | Mean | SD Маг 
Predicted 040 |17.57 | 13.48 | 5.77 || 33.35 
Model 1.79 | 121.8 | 16.55 | 11.92 | 142.1 




















The modeled recovery scenario produced eight possible network paths with 10,000 recovery 
times for each path. Figure 4.8 shows these outputs with common trends. In Figure 4.8 there 
are no significant high or low peaks or ranges of recovery times for certain recovery paths. 
With no paths showing significantly higher recovery times than others, all recovery paths 


have the potential to be considered critical recovery paths. 
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Figure 4.8. Duration Required to Recover a Generator for 10,000 Modeled 
Scenarios 


Critical paths drive the successful completion of the recovery network or process. When 
assessing all 10,000 generator recovery scenarios, Path #7 was determined to be the most 
common critical path. Figure 4.9 identifies the Generator Recovery Network critical path, 
Path #7, and the path's associated recovery time. Based off of the most common, longest 
recovery time, Path #7 is the critical path for the generator recovery model. It is important to 
note that the critical path is not necessarily the critical path for all of the generator recovery 
scenarios; however, it does dominate over the other potential paths. 
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Figure 4.9. Generator Recovery Network Diagram Showing the Critical Re- 
covery Path #7 with an Estimated Recovery Time of 7 Hours. 


With the critical path identified, the recovery time for that path was compared amongst 
all 10,000 recovery scenarios. Figure 4.10 is a PDF summarizing the relationship between 
all 10,000 recovery times and how often they occurred. This plot allows for assessment of 
whether Path #7 has a higher likelihood of success or failure in respect to recovery time. 
Figure 4.10 identifies the most occurred grouping of the 10,000 critical path recovery times 
with the red highlighted bin. 
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Figure 4.10. PDF for the Modeled Generator Recovery Path #7. The Most 
Frequent Scenario Frequency Grouping is 632 of 10,000 Scenarios. The Mode 
Recovery Time Range is 6.0 to 7.0 Hours with a 0.06 Probability of Occur- 
rence. 


For the generator critical recovery path, Path 47, recovery times that fall under 6.0 hours 
have a have a higher likelihood of success than failure. Paths with recovery times closer 
to 6.0 hours have the highest P(s) of recovery while shorter paths have a lower P(s). In 
opposite, paths that range from 7.0 hours or longer have a higher likelihood of failure than 
success. Similar to the success ranges, path recovery times that fall near 7.0 hours have a 
less likely chance to fail, but as the path's recovery time increases so does its likelihood of 
failure. 


4.1.3 Substation Recovery 
For the substation recovery process, 18 recovery tasks, as shown in Table C.1, will be 


simulated in the recovery task network. The task list includes all tasks and durations in 
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Table 4.5. The recovery procedure task list identifies all tasks sequentially from Task “А” to 
Task “5.” Appendix C provides the generated precedence list of the task list in Table C.2. 


Table 4.5. Substation Recovery Procedure Task List and Durations (hr) 





Min Max | Mean | Follow On Task 
0.15 |025 |020 |В 

017 |025 |021 |С 

0.17 |025 |021 | DF 

0.25 | 0.33 |029 |E 

0.25 | 0.33 |029 |G 

0.33 | 0.50 |042 |G 





0.17 | 0.33 | 0.25 | HI 
0.17 | 0.33 |025 |J 
0.17 | 0.25 |021 |J 
0.25 | 0.33 | 0.29 | КМ 
0.42 | 0.58 | 0.50 IL 
2.00 |3.00 |2.50 |М 
0.25 | 0.50 | 0.38 |O 
8.00 | 11.00 |95010 
1.50 | 2.50 |2.00 |Р 
0.25 | 0.50 |038 |Q 
0.17 | 0.25 |021 | R 
0.33 | 0.50 | 0.42 |S 


о оОомчзогагхл-—--" цшотпттјат»јамз 
> 


0.00 |0.00 | 0.00 
Total | 14.98 | 22.00 | 18.49 

















From the task list and task precedence order, eight possible recovery paths can be taken 
from the beginning node to the end, or "recovered," node. Based on the 10,000 iterated 
scenarios through the HPIRA tool, 10,000 path recovery sample times are produced for 
each of the eight paths. Appendix C displays Table C.3 which shows all eight possible paths 
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and the first five, of the 10,000, recovery sample times within the network. Figure 4.11 
shows the substation recovery task network with all tasks represented as alphabetical nodes 
and all potential recovery paths from start to completion. Like the the previous recovery 
task networks, the substation recovery network's critical path is determined with the same 
CPM process. 
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Figure 4.11. Substation Recovery Network Diagram 


Figure 4.12 displays a PDF for the modeled substation recovery simulation. The plot summa- 
rizes the longest recovery times of each of the 10,000 scenarios by how often they occurred. 
Plotting the occurrence frequency against the continuous variable, recovery time, produces 
a PDF where the P(s) and РО) of the substation recovery can be assessed with respect to 
recovery time. In Figure 4.12, the red highlighted bin represents the most occurred grouping 


of the 10,000 critical path recovery times. 
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Figure 4.12. PDF for the Modeled Substation Recovery Process. The Most 
Frequent Scenario Frequency Grouping is 502 of 10,000 Scenarios. The Mode 
Recovery Time Range is 11.0 to 12.0 Hours with a 0.05 Probability of Oc- 
currence. 


The greatest frequency occurrence bin represents the greatest P(s) for a substation recovery. 
Therefore, the most successful critical restoration paths will take approximately between 
between 11.0 to 12.0 hours to complete. The critical restoration path recovery times range 
from a minimum recovery time of 3.49 hours and a maximum recovery time of 124.5 hours. 
Referring back to Figure 3.5, the P(s) and P(f) of recovery processes can be estimated in 
respect to the system's recovery time. For a substation recovery, paths with recovery times 
that range between 3.49 hours to 11.0 hours have a higher likelihood of success than failure. 
Paths with recovery times closer to 11.0 hours have the highest P(s) of recovery while paths 
that fall near the minimum recovery time have a lower P(s). In opposite, paths that range 
from 12.0 hours to 124.5 hours have a higher likelihood of failure than success. Similar to 
the success ranges, path recovery times that fall near 12.0 hours have a less likely chance 
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to fail, but as the maximum recovery time of 124.5 hours is approached, the likelihood of 


failure increases. 


After conducting the modeled recovery of 10,000 substation recovery scenarios, all of the 
10,000 longest recovery times were found to fall between 3.49 and 124.5 hours. Table 4.6 
compares statistical values between the predicted and modeled recovery scenarios. Like the 
previous recovery scenarios, modeled recovery values are based off of SPAR-H analysis 
and are of stochastic nature, resulting in values that are expected to vary considerably from 


predicted values. 


Table 4.6. Recovery Time Statistics for Substation Recovery 








Recovery Scenario Min | Мах | Mean | SD Var 
Predicted 14.98 | 22.00 | 18.49 | 4.96 | 24.62 
Model 3.49 | 124.5 | 28.85 | 11.64 | 135.4 




















The modeled recovery scenario produced eight possible network paths with 10,000 recovery 
times for each path. Figure 4.13 shows these outputs with common trends. In Figure 4.13 
high and low recovery time ranges occur amongst certain recovery paths. Paths #1 to #4 


produce high recovery time ranges that represent potential critical recovery paths. 
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Figure 4.13. Duration Required to Recover a Substation for 10,000 Modeled 
Scenarios 


Critical paths drive the successful completion of the recovery network or process. When 
assessing all 10,000 substation recovery scenarios, Path #3 was determined to be the most 
common critical path. Figure 4.14 identifies the Substation Recovery Network critical path, 
Path #3, and the path's associated recovery time. Based off of the most common, longest 
recovery time, Path #3 is the critical path for the substation recovery model. It is important to 
note that the critical path is not necessarily the critical path for all of the generator recovery 
scenarios; however, it does dominate over the other potential paths. 
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Figure 4.14. Substation Recovery Network Diagram Showing the Critical 
Recovery Path #3 with an Estimated Recovery Time of 12 Hours. 


With the critical path identified, the recovery time for that path was compared amongst 
all 10,000 recovery scenarios. Figure 4.15 is a PDF summarizing the relationship between 
all 10,000 recovery times and how often they occurred. This plot allows for assessment of 
whether Path #3 has a higher likelihood of success or failure in respect to recovery time. 
Figure 4.15 identifies the most occurred grouping of the 10,000 critical path recovery times 
with the red highlighted bin. 
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Figure 4.15. PDF for Substation Recovery Path #3. The Most Frequent 
Scenario Frequency Grouping is 519 of 10,000 Scenarios. The Mode Recovery 
Time Range is 11.0 to 12.0 Hours with a 0.05 Probability of Occurrence. 


For the substation critical recovery path, Path #3, recovery times that fall under 11.0 hours 
have a have a higher likelihood of success than failure. Paths with recovery times closer to 
11.0 hours have the highest P(s) of recovery while paths that fall near the minimum recovery 
time have a lower P(s). In opposite, paths that range from 12.0 hours or longer have a higher 
likelihood of failure than success. Similar to the success ranges, path recovery times that 
fall near 12.0 hours have a less likely chance to fail, but as recovery time increases so does 
the likelihood of failure. 


4.1.4 PV Recovery 
For the PV recovery process, 13 recovery tasks, as shown in Table D.1, will be simulated 


in the recovery task network. The task list includes all tasks and durations are presented in 
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Table 4.7. The recovery procedure task list identifies all tasks sequentially from Task “А” to 
Task “N.” Appendix D provides the generated precedence list of the task list in Table D.2. 


Table 4.7. PV Recovery Procedure Task List and Durations (hr) 








Task | Min Max | Mean | Follow On Task 
A 0.15 |025 |020 |В 

В 017 |025 |021 |С 

С 0.17 | 0.33 |025 | D,E 
р 1.50 | 3.50 | 2.50 |G 
Е 0.17 | 0.33 |025 |F 

Е 0.17 [0.33 |025 |G 
С 0.08 |017 |013 | HI 
Н 0.42 | 0.58 | 0.50 | J 

1 0.25 | 0.33 |029 |К 

] 0.50 | 0.67 | 0.58 |К 
K 0.25 |0.50 0.38 IL 
L 0.17 |025 |021 |М 
M 0.33 |0.50 |042 IN 
N 0.00 |0.00 | 0.00 

Total | 4.32 | 8.00 | 6.16 

















From the task list and task precedence order, four possible recovery paths can be taken from 
the beginning node to the end, or “recovered,” node. Based on the 10,000 iterated scenarios 
through the HPIRA tool, 10,000 path recovery sample times are produced for each of teh 
four paths. Appendix D displays Table D.3 which shows all four possible paths and the 
first five, of the 10,000, recovery sample times within the network. Figure 4.16 shows the 
PV recovery task network with all tasks represented as alphabetical nodes and all potential 
recovery paths from start to completion. Like the the previous recovery task networks, the 


PV recovery network's critical path is determined with the same CPM process. 
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Figure 4.16. PV Recovery Network Diagram 


Figure 4.17 displays a PDF for the modeled PV recovery simulation. The plot summarizes 
the longest recovery times of each of the 10,000 scenarios by how often they occurred. 
Plotting the occurrence frequency against the continuous variable, recovery time, produces 
a PDF where the P(s) and P(f) of the PV recovery can be assessed with respect to recovery 
time. In Figure 4.17, the red highlighted bin represents the most occurred grouping of the 
10,000 critical path recovery times. 
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Figure 4.17. PDF for the Modeled PV Recovery Process. The Most Frequent 
Scenario Frequency Grouping is 1,739 of 10,000 Scenarios. The Mode Re- 
covery Time Range is 4.0 to 5.0 Hours with a 0.17 Probability of Occurrence. 


The greatest frequency occurrence bin represents the greatest P(s) for a PV recovery. 
Therefore, the most successful critical restoration paths will take between between four to 
5.0 hours to complete. The critical restoration path recovery times range from a minimum 
recovery time of 1.06 hours and a maximum recovery time of 41.77 hours. Referring back 
to Figure 3.5, the P(s) and P(f) of recovery processes can be estimated in respect to the 
system's recovery time. For a PV recovery, paths with recovery times that range between 
1.06 hours to four hours have a higher likelihood of success than failure. Paths with recovery 
times closer to four hours have the highest P(s) of recovery while paths that fall near the 
minimum recovery time have a lower P(s). In opposite, paths that range from 5.0 hours to 
41.77 hours have a higher likelihood of failure than success. Similar to the success ranges, 
path recovery times that fall near 5.0 hours have a less likely chance to fail, but as the 


maximum recovery time of 41.77 hours is approached, the likelihood of failure increases. 
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After conducting the modeled recovery of 10,000 PV scenarios, all 10,000 generated critical 
path recovery times fell between 1.06 and 41.77 hours. Table 4.8 compares statistical values 
between the predicted and modeled recovery scenarios. Like the previous recovery scenarios, 
modeled recovery values are based off of SPAR-H analysis and are of stochastic nature, 


resulting in values that are expected to vary considerably from predicted values. 


Table 4.8. Recovery Time Statistics for PV Recovery 








Recovery Scenario Min | Мах | Mean | SD Var 
Predicted 4.32 | 8.00 6.16 | 2.60 | 6.78 
Model 1.06 | 41.77 | 6.70 | 3.67 | 13.49 




















The modeled recovery scenario produced four possible network paths with 10,000 recovery 
times for each path. Figure 4.18 shows these outputs with common trends. In Figure 4.18 
high and low recovery time instances occur amongst certain recovery paths. Paths #2 and #4 
tend to produce the highest recovery time ranges that represent potential critical recovery 


paths. 
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Figure 4.18. Duration Required to Recover a PV for 10,000 Modeled Sce- 
narios 


Critical paths drive the successful completion of the recovery network or process. When 
assessing all 10,000 PV scenarios, Path #4 was determined to be the most common critical 
path. Figure 4.19 identifies the PV Recovery Network critical path, Path #4, and the path's 
associated recovery time. Based off of the most common, longest recovery time, Path #4 is 
the critical path for the PV recovery model. It is important to note that the most common 
critical path is not necessarily the critical path for all of the pole recovery scenarios; however, 
it does dominate over the other potential paths. 
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Figure 4.19. PV Recovery Network Diagram Showing the Critical Recovery 
Path #4 with an Estimated Recovery Time of 3 Hours. 


With the critical path identified, the recovery time for that path was compared amongst 
all 10,000 recovery scenarios. Figure 4.20 is a PDF summarizing the relationship between 
all 10,000 recovery times and how often they occurred. This plot allows for assessment of 
whether Path £4 has a higher likelihood of success or failure in respect to recovery time. 
Figure 4.20 identifies the most occurred grouping of the 10,000 critical path recovery times 
with the red highlighted bin. 
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Figure 4.20. PDF PV Recovery Path #4. The Most Frequent Scenario Fre- 
quency Grouping is 3,136 of 10,000 Scenarios. The Mode Recovery Time 
Range is 3.0 to 4.0 Hours with a 0.31 Probability of Occurrence. 


For the PV critical recovery path, Path #4, recovery times that fall under 3.0 hours have 
a have a higher likelihood of success than failure. Paths with recovery times closer to 3.0 
hours have the highest P(s) of recovery while paths that fall near the minimum recovery 
time have a lower P(s). In opposite, paths that range from 4.0 hours or longer have a higher 
likelihood of failure than success. Similar to the success ranges, path recovery times that 
fall near 4.0 hours have a less likely chance to fail, but as recovery time increases so does 
the likelihood of failure. 


4.1.5 Rechargeable Battery Recovery 
For the rechargeable battery recovery process, 13 recovery tasks, as shown in Table E.1, 
will be simulated in the recovery task network. The task list includes all tasks and durations 


are presented in Table 4.9. The recovery procedure task list identifies all tasks sequentially 
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from Task “А” to Task “М.” Appendix E provides the generated precedence list of the task 
list in Table Е.2. 


Table 4.9. Rechargeable Battery Recovery Procedure Task List and Durations 


(hr) 








Task | Min Max | Mean | Follow On Task 
A 0.15 |025 |020 |ВС 
B 0.17 |025 |021 |D 
C 0.25 |0.33 |029 |р 
D 0.17 | 0.33 |025 (ЕЕ 
E 0.17 | 0.33 |025 |G 
F 0.25 | 0.33 | 0.29 |6 
G 0.17 | 0.25 |021 |Н 
H 0.33 | 0.50 |042 | I 

I 0.50 |075 | 0.63 | J 

J 3.00 | 4.00 | 3.50 | KL 
K 0.25 | 0.33 | 0.29 |М 
L 0.33 | 0.50 |042 IM 
M 0.08 |017 |0413 |М 
М 0.00 |0.00 | 0.00 

Total | 5.82 | 8.33 | 7.08 

















From the task list and task precedence order, eight possible recovery paths can ђе taken from 
the beginning node to the end, or “recovered,” node. Based on the 10,000 iterated scenarios 
through the HPIRA tool, 10,000 path recovery sample times are produced for each of the 
eight paths. Appendix E displays Table E.3 which shows all eight possible paths and the 
first five, of the 10,000, recovery sample times within the network. Figure 4.21 shows the 
rechargeable battery recovery task network with all tasks represented as alphabetical nodes 
and all potential recovery paths from start to completion. Like the the previous recovery 


task networks, the rechargeable battery recovery network's critical path is determined with 
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the same СРМ process. 
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Figure 4.21. Rechargeable Battery Recovery Network Diagram 


Figure 4.22 displays a PDF for the modeled rechargeable battery recovery simulation. The 
plot summarizes the relationship between all 10,000 critical path recovery times and how 
often they occurred. Plotting the occurrence frequency against the continuous variable, 
recovery time, produces a PDF where the P(s) and P(f) of the downed pole recovery can be 
assessed with respect to recovery time. In Figure 4.22, the red highlighted bin represents 
the most occurred grouping of the 10,000 critical path recovery times. 
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Figure 4.22. PDF for the Modeled Rechargeable Battery Recovery Process. 
The Most Frequent Scenario Frequency Grouping is 1,404 of 10,000 Sce- 
narios. The Mode Recovery Time Range is 5.0 to 6.0 Hours with a 0.14 
Probability of Occurrence. 


The greatest frequency occurrence bin represents the greatest P(s) for a rechargeable battery 
recovery. Therefore, the most successful critical restoration paths will take approximately 
between between 5.0 to 6.0 hours to complete. The critical restoration path recovery times 
range from a minimum recovery time of 1.38 hours and a maximum recovery time of 47.40 
hours. Referring back to Figure 3.5, the P(s) and P(f) of recovery processes can be estimated 
in respect to the system's recovery time. For a rechargeable battery recovery, paths with 
recovery times that range between 1.38 hours to 5.0 hours have a higher likelihood of 
success than failure. Paths with recovery times closer to 5.0 hours have the highest P(s) 
of recovery while paths that fall near the minimum recovery time have a lower P(s). In 
opposite, paths that range from 6.0 hours to 47.40 hours have a higher likelihood of failure 
than success. Similar to the success ranges, path recovery times that fall near 6.0 hours have 
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aless likely chance to fail, but as the maximum recovery time of 47.40 hours is approached, 


the likelihood of failure increases. 


After conducting the modeled recovery of 10,000 rechargeable battery scenarios, all 10,000 
longest recovery times fell between 1.38 and 47.40 hours. Table 4.10 compares statistical 
values between the predicted and modeled recovery scenarios. Like the downed pole re- 
covery scenarios, modeled recovery values are based off of SPAR-H analysis and are of 
stochastic nature, resulting in values that are expected to vary considerably from predicted 


values. 


Table 4.10. Recovery Time Statistics for Rechargeable Battery Recovery 








Recovery Scenario Min | Мах | Mean | SD Маг 
Predicted 5.82 | 8.33 | 7.08 | 1.78 | 3.17 
Model 1.38 | 47.40 | 7.82 | 4.35 | 18.93 




















The modeled recovery scenario produced eight possible network paths with 10,000 recovery 
times for each path. Figure 4.23 shows these outputs with common trends. In Figure 4.8 
there are no significant high or low peaks or ranges of recovery times for certain recovery 
paths. With no paths showing significantly higher recovery times than others, all recovery 


paths have the potential to be considered critical recovery paths. 
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Figure 4.23. Duration Required to Recover a Rechargeable Battery for 10,000 
Modeled Scenarios 


Critical paths drive the successful completion of the recovery network or process. When 
assessing all 10,000 rechargeable battery recovery scenarios, Path #1 was determined to be 
the most common critical path. Figure 4.24 identifies the Rechargeable Battery Recovery 
Network critical path, Path #1, and the path's associated recovery time. Based off of the 
most common, longest recovery time, Path #1 is the critical path for the rechargeable battery 
recovery model. It is important to note that the critical path is not necessarily the critical 
path for all of the generator recovery scenarios; however, it does dominate over the other 
potential paths. 
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Figure 4.24. Rechargeable Battery Recovery Network Diagram Showing the 
Critical Recovery Path #1 with an Estimated Recovery Time of 5 Hours. 


With the critical path identified, the recovery time for that path was compared amongst 
all 10,000 recovery scenarios. Figure 4.25 is a PDF summarizing the relationship between 
all 10,000 recovery times and how often they occurred. This plot allows for assessment of 
whether Path #1 has a higher likelihood of success or failure in respect to recovery time. 
Figure 4.25 identifies the most occurred grouping of the 10,000 critical path recovery times 
with the red highlighted bin. 


74 


1400 





1200 


1000 


800 


600 


Frequency of Оссигепсе 


400 


200 











кен ППИ НЕ ПН | 
0 5 10 15 20 25 30 35 40 45 
Recovery Time (hr) 





Figure 4.25. PDF of Rechargeable Battery Recovery Path #1. The Most 
Frequent Scenario Frequency Grouping is 1,385 of 10,000 Scenarios. The 
Mode Recovery Time Range is 4.0 to 5.0 Hours with a 0.14 Probability of 
Occurrence. 


For the rechargeable battery critical recovery path, Path #1, recovery times that fall under 
4.0 hours have a have a higher likelihood of success than failure. Paths with recovery times 
closer to 4.0 hours have the highest P(s) of recovery while paths that fall near the minimum 
recovery time have a lower P(s). In opposite, paths that range from 5.0 hours or longer have 
a higher likelihood of failure than success. Similar to the success ranges, path recovery 
times that fall near 5.0 hours have a less likely chance to fail, but as recovery time increases 


so does the likelihood of failure. 


4.1.6 Mutlicell Battery Recovery 
For this recovery process, 12 recovery tasks, as shown in Table F.1, will be simulated in the 


recovery task network. The task list includes all tasks and durations are presented in Table 
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4.11. The recovery procedure task list identifies all tasks sequentially from Task “А” to Task 


“М. Appendix F provides the generated precedence list of the task list in Table F.2. 


Table 4.11. Multicell Battery Recovery Procedure Task List and Durations 








(hr) 
Task | Min Max | Mean | Follow On Task 
A 0.15 |025 |020 |В 
В 017 |025 |021 |С 
С 0.17 |0.33 |025 | D,E 
р 0.17 |0333 |025 |F 
Е 0.08 |025 |017 |F 
Е 0.17 |0.25 |021 С 
С 0.25 | 0.33 |029 | HI 
Н 0.08 |017 | 0.13 |J 
1 0.08 | 0.17 |0413 |J 
] 24.00 | 48.00 | 36.00 | K 
K 0.08 |025 |017 IL 
L 017 |025 |021 |М 
М 0.00 |0.00 | 0.00 
Total | 25.57 | 50.83 | 38.20 

















From the task list and task precedence order, four possible recovery paths can be taken from 


the beginning node to the end, or “recovered,” node. Based on the 10,000 iterated scenarios 


through the HPIRA tool, 10,000 path recovery sample times are produced for each of the 


four paths. Appendix Е displays Table Е.3 which shows all four possible paths and the 


first five, of the 10,000, recovery sample times within the network. Figure 4.26 shows the 


multicell battery recovery task network with all tasks represented as alphabetical nodes and 


all potential recovery paths from start to completion. Like the the previous recovery task 


networks, the multicell battery recovery network's critical path is determined with the same 


CPM process. 
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Figure 4.26 shows the task network Юг the recovery procedure task list. 
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Figure 4.26. Multicell Battery Recovery Network Diagram 


Figure 4.27 displays a PDF for the modeled multicell battery recovery simulation. The plot 
summarizes the relationship between all 10,000 critical path recovery times and how often 
they occurred. Plotting the occurrence frequency against the continuous variable, recovery 
time, produces a PDF where the P(s) and P(f) of the downed pole recovery can be assessed 


with respect to recovery time. 
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Figure 4.27. PDF for the Modeled Multicell Battery Recovery Process. The 
Most Frequent Scenario Frequency Grouping is 208 of 10,000 Scenarios. The 
Mode Recovery Time Range is 5.0 to 6.0 Hours with a 0.02 Probability of 
Occurrence. 


The greatest frequency occurrence bin represents the greatest P(s) for a multicell battery 
recovery. Therefore, the most successful critical restoration paths will take approximately 
between between 5.0 to 6.0 hours to complete. The critical restoration path recovery times 
range from a minimum recovery time of 1.10 hours and a maximum recovery time of 506.5 
hours. Referring back to Figure 3.5, the P(s) and P(f) of recovery processes can be estimated 
in respect to the system's recovery time. For a multicell battery recovery, paths with recovery 
times that range between 1.10 hours to 5.0 hours have a higher likelihood of success than 
failure. Paths with recovery times closer to 5.0 hours have the highest P(s) of recovery while 
paths that fall near the minimum recovery time have a lower P(s). In opposite, paths that 
range from 6.0 hours to 506.5 hours have a higher likelihood of failure than success. Similar 


to the success ranges, path recovery times that fall near 6.0 hours have a less likely chance 
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to fail, but as the maximum recovery time of 506.5 hours is approached, the likelihood of 


failure increases. 


After conducting the modeled recovery of 10,000 multicell battery scenarios, all 10,000 
generated critical path recovery times fell between 1.10 and 506.5 hours. Table 4.12 com- 
pares statistical values between the predicted and modeled recovery scenarios. Like the 
previous recovery scenarios, modeled recovery values are based off of SPAR-H analysis 
and are of stochastic nature, resulting in values that are expected to vary considerably from 


predicted values. 


Table 4.12. Recovery Time Statistics for Multicell Battery Recovery 








Recovery Scenario Min | Мах | Mean | SD Var 
Predicted 25.57 | 50.83 | 38.20 | 17.87 | 319.2 
Model 1.10 | 506.5 | 50.78 | 47.63 | 2270 




















The modeled recovery scenario produced four possible network paths with 10,000 recovery 
times for each path. Figure 4.28 shows these outputs with common trends. In Figure 4.28 
there are no significant high or low peaks or ranges of recovery times for certain recovery 
paths. With no paths showing significantly higher recovery times than others, all recovery 


paths have the potential to be considered critical recovery paths. 
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Figure 4.28. Duration Required to Recover a Multicell Battery for 10,000 
Modeled Scenarios 


Critical paths drive the successful completion of the recovery network or process. When 
assessing all 10,000 multicell battery recovery scenarios, Path 43 was determined to be the 
most common critical path. Figure 4.29 identifies the Multicell Battery Recovery Network 
critical path, Path #3, and the path's associated recovery time. Based off of the most common, 
longest recovery time, Path #3 is the critical path for the multicell battery recovery model. 
It is important to note that the critical path is not necessarily the critical path for all of the 


generator recovery scenarios; however, it does dominate over the other potential paths. 


80 





е5 











Figure 4.29. Multicell Battery Recovery Network Diagram Showing the Crit- 
ical Recovery Path #3 with an Estimated Recovery Time of 7 Hours. 


With the critical path identified, the recovery time for that path was compared amongst 
all 10,000 recovery scenarios. Figure 4.30 is a PDF summarizing the relationship between 
all 10,000 recovery times and how often they occurred. This plot allows for assessment of 


whether Path #3 has a higher likelihood of success or failure in respect to recovery time. 
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Figure 4.30. PDF of Multicell Battery Recovery Path #3. The Most Frequent 
Scenario Frequency Grouping is 208 of 10,000 Scenarios. The Mode Recovery 
Time Range is 5.0 to 6.0 Hours with a 0.02 Probability of Occurrence. 


For the multicell battery critical recovery path, Path #3, recovery times that fall under 5.0 
hours have a have a higher likelihood of success than failure. Paths with recovery times 
closer to 5.0 hours have the highest P(s) of recovery while paths that fall near the minimum 
recovery time have a lower P(s). In opposite, paths that range from 6.0 hours or longer have 
a higher likelihood of failure than success. Similar to the success ranges, path recovery 
times that fall near 6.0 hours have a less likely chance to fail, but as recovery time increases 
so does the likelihood of failure. 


42 Multi-Scale Microgrid Component Recovery 
This section will build off of individual component data results from the previous section. In 
addition to observing SPAR-H and stochastic simulations for individual components, obser- 
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vations will be made for combined component failure events. This section will provide two 
multi-component failure event assessments that will evaluate how human error influences 
the successful restoration of the entire microgrid architecture. A BOE assessment will be 
completed for each failure event to determine the total microgrid recovery duration time as 


well as provide data to assess whether human factors influenced that duration time. 


Like the previous section, this section assesses a notional NAVSTA’s ability to rebound a 
degraded microgrid system with a hypothetically combined component failure event. The 
NAVSTA microgrid has a simple architecture that performs at normal operations under 
ideal conditions. The indecent of failure is unintentional and isolated to a single microgrid 
component. The NAVSTA microgrid has a simple architecture that performs at normal 
operations under ideal conditions. The recovery plan for the two multi-component failure 
events will include the same fully qualified two-person team consisting of a High Voltage 
Supervisor and a Lead Electrician. The two-person team will be recovering every component 
that fails with no breaks, rest periods, or days off. Environmental conditions will be ideal 
and all tools and supplies are available and in supply. 


Table 4.13 summarizes the installed and fully operating component capability for the 


NAVSTA simple microgrid architecture. 


Table 4.13. Total Number of NAVSTA Microgrid Components 








Microgrid Component # of Components 
Power Pole 2000 

Diesel Generator Sets 80 

Substation I3 

PV 54 

Rechargeable Battery 78 

Multicell Battery 5 
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4.2.1 Multi-Component Failure Event #1 

For this multi-component failure event, Table 4.14 summarizes the total number of compo- 
nents that have been damaged or degraded. All components listed need to be fully repaired 
in order to restore the NAVSTA microgrid back to normal operations. 


Table 4.14. Number of Degraded Microgrid Components Applied for Failure 
Event #1 BOE Analysis 








Microgrid Component # Degraded Components 
Power Pole 50 

Diesel Generator Sets 10 

Substation 3 

PV 25 

Rechargeable Battery 18 

Multicell Battery 2 








The simulated BOE analysis conducted on the multi-component failure event considers each 
component's modeled scenario's critical path recovery times. The same simulated BOE 
analysis was conducted with maximum and minimum predicted duration values provided 
from [32]. Total duration times represent man-hours needed to recover all components in the 
given failure event. In all three BOE analyses, resulting total durations exceeded USMC's 
and USN's maximum autonomy times for energy security. By not meeting standardized 
autonomy metrics, the NAVSTA of interest is unable to support mission critical areas and 
is vulnerable in its ability to maintain energy security. АП BOE final recovery durations 
results are found in Table 4.15. 
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Table 4.15. Failure Event #1 BOE Total Recovery Man-Hours Results for а 
Two-Person Recovery Team 








Recovery Scenario Man-Hours (hrs) | Man-Hours 
(days) 
Modeled 1,588 66 
Predicted Max 1,667 70 
Predicted Min 1,084 46 











4.2.2  Multi-Component Failure Event #2 

For this multi-component failure event, Table 4.16 summarizes the total number of compo- 
nents that have been damaged or degraded. All components listed need to be fully repaired 
in order to restore the NAVSTA microgrid back to normal operations. 


Table 4.16. Number of Degraded Microgrid Components Applied for Failure 
Event #2 BOE Analysis 








Microgrid Component # Degraded Components 
Power Pole 500 

Diesel Generator Sets 25 

Substation 8 

PV 50 

Rechargeable Battery 54 

Multicell Battery 4 








Like failure event #1, The simulated BOE analysis conducted on the multi-component 
failure event considers each component's modeled scenario's critical path recovery times. 


The same simulated BOE analysis was conducted with maximum and minimum predicted 
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duration values provided from [32]. Total duration times represent man-hours needed to 
recover all components in the given failure event. In all three BOE analyses, resulting total 
durations exceeded USMC's and USN's maximum autonomy times for energy security. By 
not meeting standardized autonomy metrics, the NAVSTA of interest is unable to support 
mission critical areas and is vulnerable in its ability to maintain energy security. АП BOE 
final recovery durations results are found in Table 4.17. 


Table 4.17. Failure Event #2 BOE Total Recovery Man-Hours Results for а 
Two-Person Recovery Team 








Recovery Scenario Man-Hours (hrs) | Man-Hours (days) 
Modeled 10,900 454 
Predicted Max 11,350 473 
Predicted Min 7,761 324 











4.3 Chapter Summary 

This chapter applied the HPIRA tool that was developed in Chapter 3 to six different 
microgrid component recovery processes and two multi-scale microgrid recovery events. 
Successful recovery time durations are considered equal to the man-hours required for a 
successful recovery of a degraded microgrid system. Additionally this chapter determined 
recovery time bounds for each recovery process where microgrid restoration efforts were 
likely to succeed and to fail. Chapter 5 summarizes Chapter 4's findings, presents recom- 
mendations HPIRA applications, and potential follow on work. 
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СНАРТЕК 5: 


Conclusion 





Energy security for DoD installations has never been a more important topic of study. 
The DoD recognizes that modern energy infrastructures and systems have limitations in 
regards to ensuring reliability, resilience, and efficiency [1]. Current safeguards designed 
within energy systems alone do not place the DoD in secure conditions to maintain mission 
readiness. It is incumbent upon all DoD installations to investigate new and diverse avenues 
to support DoD initiatives in improving energy security. The USN firmly supports these 
initiatives and strives to build on the three pillars of energy security within its own energy 
infrastructures and systems. The goal of this thesis is to investigate and develop a method 
to improve resilience within DoD microgrids. While most microgrid resilience research 
focuses on system design, this thesis places focus on the operators of the microgrid sys- 
tem. Specifically for microgrid recovery scenarios, this thesis draws attention to recovery 
personnel's cognitive states during their restoration efforts in recovery degraded microgrid 
systems. This chapter shares closing thoughts about how human factors affect recovery 
procedures. By considering these factors, DoD leadership can better prepare and manage its 
workforce and resources to improve and strengthen energy security measures. This chapter 
provides a summary of findings, presents recommendations, and suggests future work for 


building DoD microgrid resilience with respect to microgrid recovery procedures. 


51 Summary of Findings 

In an effort to improve DoD microgrid resilience, this thesis investigates the influence 
of human cognition in microgrid recovery procedures. While it is assumed that recovery 
procedures improve the rebound of a degraded microgrid system, it does not guarantee 
it. In fact, there is always a chance that recovery procedures can be further degraded 
if the procedures are not properly performed. Within this thesis, six different microgrid 
component recovery procedures are assessed as predicted recovery scenarios and as modeled 
recovery scenarios with SPAR-H applications. Both scenarios’ recovery time results are 
shown in Table 5.1. For all components assessed, their respective critical path's most 


successful recovery time ranges fell under their average predicted recovery time values. 
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This indicates that when considering human factors within recovery procedures, it does 
not negatively impact the successful completion of component recoveries. While this data 
reflects promising results, the scenarios are based on ideal situations where the recovery 
team members are fully qualified, rested, and bear no other daily responsibilities or stressors. 
Additionally, environmental conditions are ideal and introduce no further challenges or 


complications in the recovery process. 


Table 5.1. Most Successful Modeled Recovery Time Range and Average 
Predicted Recovery Times for all Assessed Microgrid Components 








Component Modeled (hr) Average Predicted (hr) 
Pole 13.0 - 14.0 16.54 

Generator 6.0 - 7.0 13.48 

Substation 11.0 - 12.0 18.49 

PV 3.0 - 4.0 6.16 

Rechargeable Battery 4.0 - 5.0 7.08 

Multicell Battery 5.0 - 6.0 38.20 











Any paths that are completed in shorter durations than the most successful modeled recovery 
durations have strong chances of successful system recovery. It is important to note that 
even while the shortest duration time proves the success of a microgrid component and 
system restoration, it may not necessarily occur, because rushing to complete tasks does not 
guarantee successful recovery and could potentially cause inadvertent errors or mistakes. 
That is why a higher likelihood of success will typically occur near the most successful 
recovery time range. Also, each recovery path is dependent on the combination of task 
complexity and longevity. The successful completion of the recovery path and/or process 
is only as good as the persons completing it. There are pros and cons to evaluating a 
single two-person restoration team in modeled recovery scenarios. By utilizing the same 
recovery team members, familiarity and knowledge of component specifications allow for 
more efficient reparations. However, the more damaged a component is, the more time 


consuming the recovery tasks are. Familiarity and knowledge of a subject can only take 
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а human so far if they are not mentally or physically fit. Fatigue and stress contribute to 
prolonged completion of tasks and can very well result in further damage of a component. 
Regardless of which component is being recovered, recovery duration times that take longer 
than the most successful recovery time ranges will have an increased probability of failure 
that can increase the risk of further system degradation or personnel injury. This will most 
likely cause recovery personnel with experience greater fatigue as time goes on, which can 


potentially increase the complexity of completing the recovery path. 


This project compared modeled multi-component recovery events with human factors. When 
comparing modeled versus predicted man-hour outputs for recovering two different events, 
it was determined that human factors did not significantly differ from predicted man-hour 
estimations. These results are not rigorous enough to be used as proven data for the given 
events in Tables 4.15 and 4.17. While these two events used SPAR-H implemented stochastic 
values, the data resulting from various failed component combinations is not truly realistic. 
Each event assumes continuous repair operations with a single two-person repair team. 
In these assessments, huge factors such as working hours, non-working hours, weekends, 
rest time, and repair location travel time are not considered. Given these limitations, the 
total man-hours determined in both assessments still failed USN and USMC standards 
for installation energy autonomy. Therefore, if the important factors as mentioned are 
considered, it is expected that the recovery duration will be even longer if the recovery 


effort is left to a single two-person recovery team. 


To improve the total recovery time, or better manage man-hours, a considerable amount 
of additional, fully qualified recovery teams need to be utilized to meet USN and USMC 
standards. It is essential that not only are the recovery teams fully qualified, but also 
that they have the same adequate experience to perform all skill sets so that they can be 
interchanged between teams if needed. By adding recovery teams to these events, recovery 
efforts can potentially be sped up. For both failure events, Table 5.2 compares the single 
two-person recovery team and associated man-hour totals as well as estimated recovery 
team numbers that are needed to meet USN autonomy standards. Event required team totals 
are a conservative estimates considering predicted maximum man-hour totals. Those teams 


will work continuously with rotating 12-hour shifts. 
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Table 5.2. Number of Recovery Teams and Personnel Тог Modeled Events 
and Required Autonomy Standards 











Event Response | Recovery Man-Hours (days) | # Teams | # Personnel 
70 1 2 
Event #1 
7 5 10 
473 1 2 
Event #2 
7 34 68 














In conclusion, established recovery procedures generally do improve the rebound of a 
degraded microgrid when considering the influence of human cognition. This conclusion 
is not consistent through every recovery procedure since human cognition is affected by 
various factors as pointed out in the SPAR-H analysis. What is consistent in the analysis is 
that as an event's recovery time extends, the more likely a microgrid system recovery process 
will fail. Additionally, as observed in Section 4.2, the more complicated a recovery event 
is, the more man-hours will be needed to successfully recover all microgrid components. In 
order to meet USN autonomy standards, DoD installations must consider increasing their 
energy facility workforce with enough qualified and experienced personnel to adequately 


respond to wide-scale microgrid failure events. 


5.2 Recommendations 

Determining recovery man-hours for various unexpected microgrid disturbances, with hu- 
man factors consideration, allows for stakeholders to assess safety risks. Safety within the 
DoD is a major factor for all personnel, equipment, and installation operations. When stake- 
holders identify man-hours that are expected for a specific recovery effort, adequate planning 
to support that effort should be taken. Within this planning effort, stakeholders can identify 
the amount of recovery personnel needed so that teams are not overly worked. Fatigued 
recovery team members are subject to unintentional mistakes that can cause injury or harm 
to themselves or others and/or cause further equipment damage. Additionally, the potentially 


extraordinary volume of effort required in recovery scenarios can cause additional stress on 
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recovery team personnel, resulting in similar outcomes of fatigued personnel. Recognizing 
the amount of man-hours needed in recovery efforts will also highlight any weaknesses of 
an installation's manpower and training. It is imperative that DoD leadership is aware of 
man-hour needs of potential microgrid recovery efforts so that recovery personnel are kept 
safe. Ensuring safety of the DoD's most important asset, its people, will build and support 


resilience in the DoD's energy security initiative. 


Results from this thesis can be used as strong data sources for DoD installation stakeholders 
for personnel manning and budget discussions. Simulating various component failures and 
multi-component failure events allows for stakeholders to determine adequate man-hours 
needed to ensure that DoD installations support energy security initiatives. By determin- 
ing man-hour requirements for installation demands, deficiencies in manning, training, and 
system supply can also be identified. It is recommended that DoD installation command- 
ing officers and facility managers communicate their data findings early and often to their 
reporting chain of commands and respective program offices to ensure that their needs are 
included in their annual Program Objective Memorandums (POMs) and Budget Estimate 
Submissions (BESs). This consistent data-based communication will highlight energy se- 
curity vulnerabilities to DoD leadership so that yearly budgets can account for costs to hire 
more qualified personnel, to provide adequate training resources, and to provide purchasing 
budgets for spare parts and equipment. This effort will build and support the DoD’s energy 


security initiative with improved resilience. 


While recovery procedures provide a consistent and available approach strategy for micro- 
grid recoveries, they must also be used with optimistic caution. Like any type of instruction 
or reference, procedures and guidance need to stay updated and relevant with system devel- 
opments and specifications. This is a challenge with constantly changing technologies that 
replace broken or outdated equipment or components. If recovery guidance or references 
are not kept up to date, application of the procedures will not reflect the proper actions 
needed to restore a degraded component or system. Additionally, the recovery personnel 
applying those procedures need to be knowledgeable of the new procedures by receiving 
enough training to effectively perform them. If these forethoughts are not considered, the 
recovery process can be dragged out for long durations or even cause further damage to 
a system. Similar to preforming recovery tasks, the recovery process is only as good as 


the constant maintaining of the procedures themselves, the adequate training of those new 
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procedures, and the proper planning and coordination of newly installed system and com- 
ponent integration efforts. Without these considerations, DoD installation microgrids are 
vulnerable in having their once proven recovery procedures fail and backfire, causing cas- 
cading challenges and issues. It is recommended that DoD installation commanding officers 
and facility managers maintain microgrid recovery procedures at least quarterly to identify 


issues early so that energy security risks can be mitigated early. 


5.3 Future Work 


This thesis leverages a simple microgrid architecture from [8] to develop the HPIRA tool 
for various component recovery process simulations. The HPIRA tool generates recovery 
duration times for successful recovery processes, however, the recovery durations best 
represent the man-hours needed to recover downed components. In order to better and more 
accurately determine man-hours needed for failure events, further investigation should be 
taken into different human cognitive states. This thesis provides the foundation of analysing 
the effect of human cognition on successfully completed recovery tasks and processes, 
however, the SPAR-H PSF ratings are based off of ideal conditions. More rigorous cognitive 
scenarios can provide a more realistic and conservative recovery assessment for DoD 
microgrids. Additionally, research should consider how PSFs change as failure events are 
prolonged or emerge into cascading failure events. This research applies the initial state of 
PSF ratings for all failure scenarios, but in reality, factors such as stress and fitness for duty 


become more relevant as they change over time. 


While this thesis focuses on unintentional microgrid failure scenarios, research should be 
done on microgrid failures that result from commission, or intentional malicious attacks. 
Consideration and focus on high value assets on DoD installations should be assessed so that 
in the case of events like targeted terrorist attacks, DoD installations have system protections 
and responses in place. This research may lead towards classified distributions, but it will 
allow stakeholders to have greater knowledge and awareness of microgrid recovery efforts 
on critical microgrid supported infrastructures. Additionally, this research can lead towards 
assessing cyber attack recovery processes that influence electric systems such as microgrids. 
This effort will most likely require coordination and assistance from information technology 


and software development personnel to best capture electronic recovery procedures. 
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The HPIRA tool's framework provides а valid data source for personnel manning, support, 
and training that can be used for other types of analysis. With generated recovery time 
durations, or man-hour requirements, HPIRA data can be used within cost analysis research. 
Man-hours for various microgrid recovery scenarios that do not include normal operations 
and maintenance actions, can influence budget factors that cover personnel overtime and 
training as well as salary costs for government and contracted personnel. Additionally, 
HPIRA data can be used for system suitability research in considering reliability, availability, 
and maintainability of microgrid systems and components. These considerations can and 


should be included in life cycle cost estimations for DoD microgrid systems. 
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APPENDIX А: 
Downed Pole Data 





Table A.1 summarizes the Downed Pole Recovery Task Descriptions. 


Table A.1. Downed Pole Recovery Task Descriptions 





Z 
© 
а. 
© 


Recovery Task 





a яо чол о х—- тшост г ти о о2о о» 





2-man crew identified & depart 

Crew investigates scene 

Crew Member A walks the line 

Crew Member B voltage checks 

Crew reports fault(s)/repair actions 

Connect temporary Gen to Connection Pt w/Tie In 
Secure Physical Area of Incident 

Electrically isolate € Breakers w/tag outs 

Safety Checks 

Stabilize Damaged Pole with Utility Truck Pinchers 
Pull & Replace Damaged Fuses 

Repair 3 Line Pole with Cross Arms 

Clean Oil Spill from Transformer Damage 
Transport New Transformer to Site w/Crane 

Secure & Restore Connections to new transformer 
Re-energize power lines €? breakers 

Verify power outputs at substation controllers, no faults 
Disconnect temporary Generator 


Recovery 





Table A.2 summarizes the precedence order for the Downed Pole Task List. 
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Table A.2. Downed Pole Recovery Ргеседепсе List 





ез 
© 
В 


Avg. Duration (hr) 
0.20 
021 
0.21 
0.26 
021 
0.25 
0.42 
0.42 
0.21 
0.29 
0.25 
0.75 
0.75 
0:29 
3.00 
3.00 
2.00 
3.50 
4.00 
4.00 
0.21 
0.21 
0.29 





моәзооссггижкя-м-мңаотсцттцш о ао > 
PO we дао 











Table А.З shows all possible paths and their duration within the network. Note that the 


duration values for each path are a summation of stochastic results for each task or node. 
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Table А.З. Downed Pole Recovery Network Paths and Duration for 5 Кега- 
tions 





Paths 1 2 3 4 5 

ABDEFHIJKLMNOPRS 25.645| 15.641| 28.673] 19.222 6.6002 
ABCEFHIJKLMNOPRS 25.667} 15.401 28.51 | 19.267 6.762 
ABDEFGJKLMNOPRS 24.437| 14.42 | 28.823) 19.866 7.8396 
ABCEFGJKLMNOPRS 24.46 | 14.18 | 28.66 | 19.911 8.0014 





ABDEFHIJLMNOPRS 25.322) 14.843) 28.399) 18.728) 6.0917 
ABCEFHIJLMNOPRS 25.345) 14.603) 28.236) 18.772 6.2535 
ABDEFGJLMNOPRS 24.115} 13.621 28.549) 19.371, 7.3311 
ABCEFGJLMNOPRS 24.137! 13.382 28.386) 19.416 7.4929 
ABDEFHIJKLNOPRS 23.09 | 14.997) 25.109) 12.03 | 5.8433 
ABCEFHIJKLNOPRS 23.112) 14.757) 24.946) 12.075) 6.005 
ABDEFGJKLNOPRS 21.882! 13.775 25.259) 12.673, 7.0826 
ABCEFGJKLNOPRS 21.905} 13.536) 25.096) 12.718 7.2444 
ABDEFHIJLNOPRS 22.767) 14.199) 24.835) 11.535 5.3347 
ABCEFHIJLNOPRS 22.79 | 13.959) 24.672) 11.58 | 5.4965 
ABDEFGJLNOPRS 21.56 | 12.977) 24.985) 12.179 6.5741 
ABCEFGJLNOPRS 21.382, 12.737 24.822| 12.223| 6.7359 


ABDEFHIJKLMNOQRS 25.623) 15.682) 28.214) 19.171) 6.7659 
ABCEFHIJKLMNOQRS 25.646) 15.442) 28.052) 19.216 6.9277 
ABDEFGJKLMNOQRS 24.416) 14.46 | 28.364) 19.815 8.0053 
ABCEFGJKLMNOQRS 24.438} 14.221) 28.202) 19.86 | 8.1671 

















ABDEFHIJLMNOQRS 25.301} 14.884 27.94 | 18.676 6.2574 
ABCEFHIJLMNOQRS 24.093) 13.662) 28.09 | 19.32 | 7.4968 
ABDEFGJLMNOQRS 25.301) 14.884 27.94 | 18.676 6.2574 
ABCEFGJLMNOQRS 24.116) 13.422) 27.928) 19.365 7.6585 
ABDEFHIJKLNOQRS 23.068) 15.038) 24.651) 11.978) 6.0089 
ABCEFHIJKLNOQRS 23.091} 14.798) 24.488) 12.023 6.1707 
ABDEFGJKLNOQRS 21.861} 13.816 24.801] 12.622 7.2483 
ABCEFGJKLNOQRS 21.883! 13.576 24.638) 12.667 7.4101 
ABDEFHIJLNOQRS 22.746| 14.24 | 24.377| 11.483 5.5004 
ABCEFHIJLNOQRS 22.768| 14.00 | 24.214) 11.528 5.6622 
ABDEFGJLNOQRS 21.538} 13.018 24.527) 12.127 6.7398 
ABCEFGJLNOQRS 21.561} 12.778 24.364) 12.172, 6.9016 
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APPENDIX B: 
Generator Loss Data 





Table B.1 summarizes the Generator Recovery Task Descriptions. 


Table B.1. Generator Recovery Task Descriptions 





Z 
© 
с. 
© 


Recovery Task 





> 


тоос ш 


очохлкгя==тшоа т 





2-man crew identified & depart 

Crew investigates scene 

Crew investigates status of generator (running or not) 

GEN Running: Check ATS status & protection breaker status 
Check status of main breakers (not tripped) & connection points 
(on buildings) 

If #5 SAT, investigate circuits - fault found: short circuit 
Measure amperage draw: Circuit Overload (>20атр)? 

Crew reports fault(s)/repair actions 

Secure Physical Area of Incident 

Electrically isolate € Breakers w/tag outs 

Safety Checks 

Split Circuit (split load & modify plugs) 

Secure and restore connections 

Reengergize @breakers 

Measure load (verify load below rating capacity) 

Verify power outputs at substation controllers, no faults 


Recovery 





Table B.2 summarizes the precedence order for the Generator Loss Task List. 
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Table В.2. Generator Recovery Precedence List 








From To Avg. Duration (hr) 
A B 0.20 
B C 0.21 
C D 0.10 
C E 0.10 
D F 0.10 
E F 0.54 
F G 0.38 
G H 0.54 
G I 0.54 
H J 0.25 
I J 0.25 
J K 0.21 
K L 0.29 
ЈЕ М 9.00 
L N 9.00 
N O 0.38 
M P 0.21 
P Q 0.42 
O Q 0.42 











Table B.3 shows all possible paths and their duration within the network. Note that the 


duration values for each path are a summation of stochastic results for each task or node. 
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Table B.3. Generator Recovery Network Paths and Duration for 5 Iterations 








Paths 1 2 3 4 5 

ABCEFGIJKLMPQ 8.4379| 20.515| 28.085| 15.479 24.156 
ABCDFGIJKLMPQ 6.4322| 20.189| 28.025) 14.39 | 23.941 
ABCEFGHJKLMPQ 8.7386, 20.686| 27.647| 15.68 | 24.562 
ABCDFGHJKLMPQ 6.7329: 20.36 | 27.587| 14.591 24.347 
ABCEFGIJKLNOQ 8.2951| 21.51 | 27.814| 13.646| 23.476 
ABCDFGIJKLNOQ 6.2894! 21.192 27.754| 12.556) 23.261 
ABCEFGHJKLNOQ 8.5958| 21.689 27.376) 13.847 23.881 
ABCDFGHJKLNOQ 6.5901| 21.363 27.316| 12.758 23.666 
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APPENDIX C: 
Substation Loss Data 





Table C.1 summarizes the Substation Recovery Task Descriptions. 


Table C.1. Substation Recovery Task Descriptions 





Node 


Recovery Task 





тоос ш 


Qum ue CS NOUS 0 т 


o o 





2-man crew identified & depart 

Investigate Substation Status w/remote SCATA-find open breakers 
Crew investigates scene 

Investigate 1247 transformer circuit panel for Open Feeder Breaker 
Investigate 1247 transformer circuit panel for Open Main Feeder 
Breaker 

Investigate 345 transformer circuit panel - outside fault out in the 
field (due to insulator split on pole) 

Crew reports fault(s)/repair actions 

Secure Physical Area of Incident 

Electrically isolate € Breakers w/tag outs 

Safety Checks 

Deploy and use bucket truck to investigate insulator crack 
Replace insulation materials and verify connections all secure 
Inspect transformer for wet/dry sump blown fuses, or windings 
Remove and replace blown wet sump fuse 

Perform Frequency & MEGGER Tests (static voltage on windings) 
on each transformer phase to ensure no other damage 

Secure and restore connections 

Re-energize @breakers 

Verify power outputs at substation controllers, no faults 


Recovery 
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Table С.2 summarizes the precedence order for the Substation Loss Task List. 


Table C.2. Substation Recovery Precedence List 








From To Avg. Duration (hr) 
A B 0.20 
B C 0.21 
C D 0.21 
C F 0.21 
D E 0.29 
F G 0.42 
E G 0.29 
G H 0.25 
G I 0.25 
H J 0.25 
I J 0.21 
J N 0.20 
J K 0.29 
K L 0.50 
L M 2.50 
M O 0.38 
N O 9.50 
O P 2.00 
P Q 0.38 
Q R 0.21 
R 5 0.42 











Table C.3 shows all possible paths and their duration within the network. Note that the 


duration values for each path are a summation of stochastic results for each task or node. 
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Table С.З. Substation Recovery Network Paths and Duration for 5 Iterations 








Paths 1 2 3 4 5 
ABCDEGIJKLMOPQRS 12.61 | 25.038) 19.718] 93.579| 18.592 
ABCFGIJKLMOPQRS 10.084) 24.107) 19.398} 93.339 18.267 


ABCDEGHJKLMOPQRS 12.996 25.211) 19.557) 93.589 18.441 
ABCFGHJKLMOPQRS 10.47 | 24.28 | 19.237) 93.349 18.116 

















ABCDEGIJNOPQRS 9.7187) 9.0098 4.6135) 16.645 6.5564 
ABCFGIJNOPQRS 7.1927| 8.0786 4.2935| 16.405 6.2314 
ABCDEGHJNOPQRS 10.105} 9.1826) 4.4525! 16.654) 6.4054 
ABCFGHJNOPQRS 7.5791} 8.2514 4.1325} 16.414 6.0805 
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APPENDIX D: 
PV Loss Data 





Table D.1 summarizes the PV Recovery Task Descriptions. 


Table D.1. PV Recovery Task Descriptions 





Z 
© 
с. 
© 


Recovery Task 





=a" r Ammu 0 aW > 


ZEUCHxW 





2-man crew identified & depart 

Crew investigates scene 

Crew examines single inverter for a simple reset 

Perform voltage checks to identify degraded PV panel 
Crew reports fault(s)/repair actions 

Secure Physical Area of Incident 

Open identified PV panel - Identify fault - ground 
Electrically isolate @ Breakers & Combiner Box w/tag out 
Safety Checks 

Modify Wiring: Disconnect wiring, bypass failed panel to next 
panel, Reconnect Wiring 

Secure and restore connections 

Re-energize @breakers 

Verify voltage/amperage with voltage checks 


Recovery 





Table D.2 summarizes the precedence order for the PV Loss Task List. 
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Table D.2. PV Recovery Precedence List 








From To Avg. Duration (hr) 
A B 0.20 
B C 0.21 
C D 0.25 
C E 0.25 
E F 0.25 
D G 2.50 
F G 0.25 
G H 0.13 
G I 0.13 
I K 0.29 
H J 0.50 
J K 0.58 
K L 0.38 
L M 0.21 
M N 0.42 











Table D.3. PV Recovery Network Paths and Duration for 5 Iterations 








Paths 1 2 3 4 5 

ABCEFGIKLMN 4.6936| 3.535 | 3.2827, 3.1377 2.5475 
ABCDGIKLMN 4.0722! 10.038 10.27 | 1.7316, 3.1813 
ABCEFGHJKLMN 6.3943| 3,8543 3.9293| 3.2103 3.1925 
ABCDGHJKLMN 5.7729| 10.358) 10.917| 1.8042 3.8263 
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APPENDIX E: 
Rechargeable Battery Loss Data 





Table E.1 summarizes the Rechargeable Battery Recovery Task Descriptions. 


Table E.1. Rechargeable Battery Recovery Task Descriptions 





Node 


Recovery Task 





A 
B 
C 


uem ай л” тосто аф 





2-man crew identified & depart 

Crew investigates scene 

Crew examines alarm panels to indicate equipment with failed 
batteries 

Crew reports fault(s)/repair actions 

Secure Physical Area of Incident 

Safety Checks 

Open breakers to lighten load on COGEN 

Electrically isolate battery 

Remove module & clean connectors & replace module 
Charge battery module 

Secure and restore connections 

Re-energize @breakers & restart substation battery 
Verify equipment indications are SAT @substation 


Recovery 





Table E.2 summarizes the precedence order for the Rechargeable Battery Task List. 
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Table E.2. Rechargeable Battery Precedence List 








From To Avg. Duration (hr) 
A B 0.20 
A C 0.20 
B D 0.21 
C D 0.29 
D E 0.25 
D F 0.25 
E G 0.25 
F G 0.29 
С Н 0.21 
Н І 0.42 
І Ј 0.63 
Ј K 3.50 
J L 3.50 
K M 0.29 
L M 0.42 
M N 0.13 











Table E.3 shows all possible paths and their duration within the network. Note that the 


duration values for each path are a summation of stochastic results for each task or node. 
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Table E.3. Rechargeable Battery Recovery Network Paths and Duration for 
5 Iterations 








Paths 1 2 3 4 5 

ACDFGHIJLMN 3.9254| 10.604 13.848) 3.2448 7.7349 
ABDFGHIJLMN 4.5573| 10.652, 14.064] 3.2567 7.5405 
ACDEGHIJLMN 3.6225| 10.403) 13.208| 2.7794 6.8727 
ABDEGHIJLMN 4.2544. 10.451! 13.424] 2.7912) 6.6783 
ACDFGHIJKMN 3.7262} 10.085 13.525] 3.2843 7.1654 
ABDFGHIJKMN 4.3581| 10.133 13.741| 3.2962 6.971 
ACDEGHIJKMN 3.4233| 9.884 | 12.885| 2.8189 6.3032 
ABDEGHIJKMN 4.0552] 9.9316 13.101} 2.8308 6.1088 
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APPENDIX Е: 
MultiCell Battery Loss Data 





Table F.1 summarizes the Multicell Battery Recovery Task Descriptions. 


Table F.1. Multicell Battery Recovery Task Descriptions 





Z 
© 
а. 
© 


Recovery Task 





по д-о-"шоплштшоош»> 


zZ 





2-man crew identified & depart 

Crew investigates scene 

Crew reports fault(s)/repair actions 

Secure Physical Area of Incident 

Electrically isolate battery rack 

Disconnect leads & remove battery rack 
Replace with new battery rack, connect leads 
Safety checks 

Restart storage system 

Charge battery rack 

Reengergize @breakers & restart battery rack 
Verify power output by each rack controller: voltage and amperage 
readings check at each disconnect and breaker 


Recovery 





Table F.2 summarizes the precedence order for the Multicell Battery Loss Task List. 
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Table F.2. Multicell Battery Recovery Precedence List 








From To Avg. Duration (hr) 
A B 0.20 
B C 0.21 
C D 0.25 
C E 0.25 
D F 0.25 
E F 0.17 
F G 0.21 
G H 0.29 
С І 0.29 
Н Ј 0.13 
І Ј 0.13 
Ј K 36.00 
K L 0.17 
L M 0.21 











Table F.3 shows all possible paths and their duration within the network. Note that the 


duration values for each path are a summation of stochastic results for each task or node. 


Table F.3. Multicell Battery Recovery Network Paths and Duration for 5 








Iterations 
Paths 1 2 3 4 5 
ABCEFGIJKLM 55.141} 24,593 24.327) 102.89 8.6922 
ABCDFGIJKLM 54.868} 25.212) 24.502| 102.85 9.219 
ABCEFGHJKLM 55.14 | 24.632 24.422) 102.64 8.5736 
ABCDFGHJKLM 54.866) 25.251| 24.597| 102.6 | 9.1005 
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APPENDIX 6: 
PIRA Matlab Model & Supporting Functions 





Matlab Code for the HPIRA Test Model for an Example 
Failed Component 


2 % Manual Update for Lines: 37,38,55,80 


o Import SPAR-H PSF Data 
[~ ,зћее _пате ]= xlsfinfo( SPAR-H PSF Inputs_Example. xlsx’); 
for kz1:numel(sheet. name); 
[~,~,data{k}]J= xlsread( SPAR-H PSF Inputs Example.xlsx', 
sheet name(k]); 


end 


а = l; 
% Diagnosis/Action PSF Data Inputs 
for К = 1:2:numel(sheet name); 
Diagnosis{a} = data(kj(2:numel(sheet name) ,5); 
PSF_Diagnosis{a} = cellfun(@rmmissing, Diagnosis{a}, 
'"UniformOutput', false); 
PSF_Diagnosis{a} = PSF_Diagnosis{a}(~cellfun(’ 
isempty’,PSF_Diagnosis{a})); 
% Cale the Diagnosis_HEP (Part В & С & D) 
Negative_Multiples_Diagnosis{a} = cell2mat( 
PSF_Diagnosis{a}) >= 1; 
Diagnosis_HEP{a} = 1E-2*prod(cell2mat(PSF_Diagnosis { 
ayy); 
if sum(Negative_Multiples_Diagnosis{a}) >= 3; % 
greater than or just 3 of 8 PSFs are Negative 
PSFs (>1 value) 
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20 


21 


22 


23 


24 


25 


26 


27 


28 


29 


41 


Diagnosis НЕР {a} = (Diagnosis НЕР {а }) /(1Е-2%( 
prod(cell2mat(PSF Ріарпоѕіѕ {а} )) –1) +1); 

епа 

АсНоп {а} = аага {к+1 } (2: паше] ( вһееі пате) ,5); 
Even #4 Sheets: Action PSF Tabs 

PSF_Action{a} = cellfun(@rmmissing , 
UniformOutput' , false); 

PSF Actionía] PSF Action[aj(-cellfun( isempty ' , 
PSF Action(a])); 

% Calc the Action HEP (Part B & C & D) 

Negative Multiples Actioníaj = cell2mat(PSF Action(a 
}) >= 1; 

Action_HEP{a} = 1Е-3жргоа (се! 2 та (РЗЕ_ АсПоп(а))); 

% 

than or just 3 of 8 PSFs are Negative 


% 


Action{a}, 


if sum(Negative_Multiples_Action{a}) >= 3; 
greater 
PSFs (>1 value) 

Action_HEP{a} = (Action HEPí(a])/(1E-3x(prod( 
cell2mat(PSF_Action{a}))-—1)+1); 


end 
P_WOD{a} = Diagnosis_HEP{a} + Action_HEP {a}; 
а = а + 1; 


end 


Wo Import RA Set Node (Task) Precedence 


opts = spreadsheetImportOptions(" NumVariables", 3); 

opts.Sheet = "КА Set Example "; % 
Update 

opts.DataRange = "14:К10"; % 
Update 

opts. VariableNames = ["VarName5", "VarName6", "УагМате7 "|; 

opts.VariableTypes = ["char", "char", "char "Т; 

opts = setvaropts(opts, ["VarName5", "VarName6", "VarName7 
"1, "WhitespaceRule", "preserve "); 

opts = setvaropts(opts, ["VarName5", "VarName6", "VarName7 
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42 





47 


48 


49 


"1, "EmptyFieldRule", "auto"); 
RecoveryActionSets = table2array (readtable (" Microgrid 
Recovery Paths Test/Input Data/Recovery Action Sets.xlsx 


" 


‚ opts, "UseExcel", false)); 


opts = spreadsheetImportOptions(" NumVariables", 4); 
opts.Sheet = "КА Set Example "; % 
Update (Sheet Мате) 
opts.DataRange = "C3:F7"; 
% Update (Task List 


Range ) 

opts. VariableNames = ["InsertAsGeneral", "VarName2", " 
InsertAsGenerall", "VarName4"]; 

opts. VariableTypes = ["char", "char", "char", "char"]; 

opts = setvaropts(opts, ["InsertAsGeneral", "VarName2", " 
InsertAsGenerall", "VarName4"], "WhitespaceRule", " 
preserve"); 

opts = setvaropts(opts, ["InsertAsGeneral", "VarName2", " 
InsertAsGenerall", "VarName4"], "EmptyFieldRule", "auto") 


Task Duration Times = str2double(table2array (readtable (" 
Input Data/Recovery Action Sets.xlsx", opts, "UseExcel", 
false))); 


Who RA Critical Path & Duration 
% Convert Matrix to column vectors & Adjacency Matrix & 


Diagraph & Network Diagram 


S 


RecoveryActionSets (:,1) ; 

t = RecoveryActionSets (: ,2); 

RA - digraph(s, t); 

figure (1) 

Network Diagram - plot(RA); % Network Diagram 
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title ("Recovery Network Diagram") ; 


Task Network = RA. Edges; % Task Network Activity & 
Edge Listings 

iterations = 10000; % Change based off 
preference 


% Find Human Error Probable (HEP), or Probability of Error, 
for individual tasks 
[НЕР] = findHEP(PSF Diagnosis, PSF Action); 


% Find all Paths within the Recovery Set 
[Critical Paths] = findCriticalPaths (НЕР); 
storage paths = Critical, Paths; 

Critical Paths = str2double( Critical. Paths); 


о Pre- Allocate Memory for Paths & Durations 
Durations = zeros(length( Critical. Paths),iterations); 
Durations(:,1) = (Critical, Paths); 


о Determine Path Durations for each iterations 
for w = l:iterations 


[Sample Duration] = findSampleDuration( Critical, Paths , 


HEP) ; 
Sample Duration = transpose(Sample, Duration); 
Durations(:,w) = transpose(Sample , Duration); 


end 


% Table of АП Paths & Durations 


Paths Durations = table(storage paths, Durations); 

Paths Durations.Properties.VariableNames = (' Recovery Path’ 
"Duration (hr)’}; 

Paths Durations = splitvars(Paths Durations , Duration (hr)') 


2 
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89 


90 


91 


92 


93 


94 


95 


96 


97 


98 


99 


100 


101 


свумгі(е(”Ехатріе. сзу ' „Рига 1оп$ ) % Update based on 


Iterations 


% Determine Max Duration of each Iteration -» Critical Path 
of each Duration 
[Max Duration, Max Index] = max( Durations); 


[I row, I. col] = ind2sub(size(Paths. Durations), Max Index); 


% Example: Looking at just the Ist iteration 

р = 1; 

СР = transpose(cell2mat(storage_paths(I_row(p)))); 

СР Duration = Мах Duration(p); 

fprintf(' Critical Path & Duration for 151 iteration: %в Фе 
hrs’ ,CP, CP. Duration) 


o Clear temporary variables 
% clear opts 


Matlab Code for HPIRA Test Supporting Functions 
Function: findCriticalPaths 


o Find Critical Paths 
function [Critical_Paths] = findCriticalPaths (HEP) 


opts = spreadsheetImportOptions(" NumVariables", 3); 
opts.Sheet = "КА Set Example "; 
% Update (Sheet Name) 
opts.DataRange = "14:К10"; 
% Update ( 
Precedence List Range) 


opts . VariableNames = ["VarName5", "VarName6", "VarName7 "|; 
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20 


21 


22 


23 


24 


25 


opts.VariableTypes = ["char", "char", "сһаг"]; 


opts = setvaropts(opts, ["VarName5", "VarName6", "VarName7 
"1, "WhitespaceRule", "preserve "); 

opts = setvaropts(opts, ["VarName5", "VarName6", "VarName7 
"|, "EmptyFieldRule", "auto "); 


RecoveryActionSets = table2array (readtable (" Microgrid 
Recovery Paths Test/Input Data/Recovery Action Sets.xlsx 


" 


‚ opts, "UseExcel", false)); 


opts = spreadsheetImportOptions (" NumVariables", 4); 
opts.Sheet = "RA Set Example "; 
% Update (Sheet Name) 
opts.DataRange = "C3:F7"; 
% Update (Task List 


Range) 

opts. VariableNames = ["InsertAsGeneral", "VarName2", " 
InsertAsGenerall", "МагМате4" |; 

opts.VariableTypes = ["char", "char", "char", "сћаг"]; 

opts = setvaropts(opts, ["InsertAsGeneral", "VarName2", " 
InsertAsGenerall", "VarName4"], "WhitespaceRule", " 
preserve"); 

opts = setvaropts(opts, ["InsertAsGeneral", "VarName2", " 
InsertAsGenerall", "VarName4"], "EmptyFieldRule", "auto ") 


Task Duration Times = str2double(table2array (readtable (" 
Microgrid Recovery Paths Test/Input Data/Recovery Action 
Sets.xlsx", opts, "UseExcel", false))); 


S 


RecoveryActionSets (:,1) ; 
t = RecoveryActionSets (: ,2); 


% RA = digraph(s, t); 


27 


28 


[RA paths, RA] = getpaths (КА); % Generates All Possible 
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Paths 


ә а = l; 
30 Гог К = I:numel(RA. paths) 
31 [Weights] = findWeights(Task_Duration_Times , HEP); 
32 for у = 1:length( Task_Duration_Times ) 
33 КА. Nodes. Weight{y} = Weights{y}; 
34 end 
35 path{:,k} = cell2mat(RA.Nodes.Name(RA_paths{k})); 
% All Paths w/Node Precedence as Integers in 
columns 
36 Critical. Paths = transpose(path); 
0% Specify Nodes Precedence as 
Characters (in sequential order, not in order of 
Edge List) in rows 
37 end 
3 end 


Function: findHEP 


2 96 Find HEP 


а function [HEP] = findHEP(PSF Diagnosis , PSF Action) 

5 

6 % Import SPAR-H PSF Data 

т [~,sheet_name]=xlsfinfo ('SPAR-H PSF Inputs, Example.xlsx '); 
% Update 

s for k21:numel(sheet name); 

9 [~,~,дага(К)]= xlsread( SPAR-H PSF Inputs Example.xlsx', 

sheet name(k]); % Update 


ю end 


о а = 1; 


з % Diagnosis/ Action PSF Data Inputs 
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20 


21 


22 


23 


24 


25 


26 


27 


28 


29 


for К = 


1:2:numel(sheet_name) ; 

Diagnosis{a} = data{k}(2:numel(sheet_name) ,5); 

PSF_Diagnosis{a} = cellfun(@rmmissing, Diagnosis{a}, 
'"UniformOutput', false); 

PSF_Diagnosis{a} = PSF Diagnosis[aj(-cellfun(" 
isempty’,PSF_Diagnosis{a})); 

% Cale the Diagnosis_HEP (Part В & С & D) 

Negative_Multiples_Diagnosis{a} = cell2mat( 
PSF_Diagnosis{a}) >= 1; 

Diagnosis_HEP{a} = 1E-2*prod(cell2mat(PSF_Diagnosis { 
а})); 

if зат ( Negative Multiples Diagnosis[aj) >= 3; % 
greater than or just 3 of 8 PSFs are Negative 
PSFs (>1 value) 
Diagnosis_HEP{a} = (Diagnosis HEP(a])/(1E-2«s( 

prod(cell2mat(PSF_Diagnosis{a}))-1)+1); 

end 

Action{a} = data{k+1}(2:numel(sheet_name) ,5); % 
Even £d Sheets: Action PSF Tabs 

PSF_Action{a} = cellfun(@rmmissing, Action{a}, | 
UniformOutput’, false); 

PSF_Action{a} = PSF_Action{a}(~cellfun(’isempty’, 
PSF_Action{a})); 

% Calc the Action HEP (Part B & С & D) 

Negative Multiples Actioníaj = cell2mat(PSF_Action{a 
}) >= 1; 

Action_HEP{a} = 1E-3*prod(cell2mat(PSF_Action{a})); 

if sum(Negative_Multiples_Action{a}) >= 3; % 
greater than or just 3 of 8 PSFs are Negative 
PSFs (>1 value) 
Action_HEP{a} = (Action HEPí(a])/(1E-3x(prod( 

cell2mat(PSF_Action{a}))-—1)+1); 


end 
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P_WOD{a} = Diagnosis НЕР(а) + Action HEPí(a]; 


а = 


end 


o Calc 


а = l; 
for К = 


end 


end 


а + 1; 


P WD (with dependence) 


2:2:numel(sheet name); 
Dependency{a} = data{k}(4,10); 
x = Dependency{a}; 
if strempi(x, ' Complete’ ) 
P_WD{a} = 1; 
elseif strcmpi(x, High’) 
P Wbía) = (1+ P_WOD{a})/2; 
elseif strcmpi(x,’ Moderate’ ) 
PWD{a} = (1 + (6*P_WOD{a}))/7; 
elseif strcmpi(x, Low’) 
PWD{a} = (1 + (19xP WOD(a]))/20; 
else strcmpi(x,’ Zero’); 
P_WD{a} = P_WOD{a}; 
end 
HEP{a} = P_WD{a}; 


а = а + l; 


Function: findSampleDuration 


lo Find 1 Sample Duration for АП Paths 


function [Sample Duration] = findSampleDuration( 
Critical, Paths , HEP) 
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opts = spreadsheetImportOptions (" NumVariables", 3); 


opts.Sheet = "КА Set Example "; % 
Update (Sheet Мате) 
opts.DataRange = "14:К10"; 


% Update (Precedence 
List Range) 


opts. VariableNames [" VarName5", "VarName6", "VarName7"]; 


opts. VariableTypes = ["char", "char", "char"]; 

opts = setvaropts(opts, ["VarName5", "VarName6", "VarName7 
"1, "WhitespaceRule", "preserve "); 

opts = setvaropts(opts, ["VarName5", "VarName6", "VarName7 
"|, "EmptyFieldRule", "auto "); 


RecoveryActionSets = table2array (readtable (" Microgrid 
Recovery Paths Test/Input Data/Recovery Action Sets.xlsx 


" 


‚ opts, "UseExcel", false)); 


s = RecoveryActionSets (:,1) ; 
t = RecoveryActionSets (: ,2); 
RA = digraph(s, t); 


opts = spreadsheetImportOptions(" NumVariables", 4); 
opts.Sheet = "КА Set Example "; % 
Update (Sheet Мате) 
opts.DataRange = "C3:F7"; 
% Update (Task List 


Range ) 

opts. VariableNames = ["InsertAsGeneral", "VarName2", " 
InsertAsGenerall", "VarName4 "]; 

opts.VariableTypes = ["char", "char", "char", "char "Т; 

opts = setvaropts(opts, ["InsertAsGeneral", "VarName2", " 
InsertAsGenerall", "VarName4"], "WhitespaceRule", " 


preserve"); 
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opts = setvaropts(opts, ["InsertAsGeneral", "VarName2", 
InsertAsGenerall", "VarName4"], "EmptyFieldRule", "auto ") 

Task Duration Times = str2double(table2array (readtable (" 
Input Data/Recovery Action Sets.xlsx", opts, "UseExcel", 
false))); 


[RA paths, RA] = getpaths (КА); 
[Weights] = findWeights(Task Duration Times , HEP); 
Гог К = 1: поте! (КА paths) 
for у = 1: 1еп = (Тазк_Ригабоп_Ттез) 
RA.Nodes.Weight{y} = Weights{y}; 
end 
path_duration(k) = зам (се |2 та (КА. Nodes. Weight ( 
RA_paths{k}))); 
Sample_Duration(k) = path_duration(k); 
end 


end 


Function: find Weights 


lo Find Node Weight (Duration Times) 


function [Weights] = findWeights(Task Duration Times , HEP) 
Wo Set up the Import Options and import the data 


% Sample time from P(fail/success) of Exponential 
Distriubtion 

mu low = Task Duration Times (:,2); 

mu high = Task Duration, Times (:,3); 


mu = Task Duration Times(:,4); 


а = 1; 
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з % Random number from Exponential Distribution 





а for i = 1:Јепо(ћ(Тазк_ Duration Times) 

5 r{i} = random(’ Exponential’ ,mu) ; 

6 if r{i} > НЕР{а}; 

7 Weights{a} = exprnd(mu_low(i)); 
8 else 

9 Weights{a} = exprnd(mu_high(i)); 
20 end 

21 а = а + l; 

2 end 

з end 


Function: зебра $ 


2 Wo Find АП Paths 


а % Path Code from MatlabCentral 

s 9o (https ://www. mathworks .com/ matlabcentral/answers/417396 — 
calculating —all -paths -from-a- given –поде –1п -а-– діргарһ# 
answer 335365) 


7 function [paths ,topo_g] = getpaths(g) 


8 Soreturn all paths from а DAG. 

9 %the function will error in toposort if the graph is not 
a DAG 

10 paths = {}; %раїһ computed so far 

n [nid topo g] = toposort(g, 'Order', ’stable’); 9e sets 
the algorithm to stable [see link]. Shows Nodes as 
Integets. 

12 endnodes = ||; %current end node of each path for 


easier tracking 
з о for i = toposort(topo g) %1їегаїе over all nodes 


14 for i = nid; 
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N 


if indegree(topo_g, i) == 0 node is a root, 
simply add it for now 
paths = [paths; i]; %&#ok<AGROW> 
endnodes = [endnodes; i]; “c#ok<AGROW> 

end 

%їЇїпа successors of current node and replace all 
paths that end with the current node with 


cartesian product of paths and successors 


toreplace = endnodes == i; %а11 paths that need 
to be edited 
S — successors(topo g, i); 


if -isempty (s) 
[p, tails] = ndgrid(paths(toreplace), s); % 
cartesian product 
paths = [cellfun(@(p, t) [р, t], р(:), num2cell( 
tails (:)), 'UniformOutput' , false); Фаррепа 
paths and successors 
paths(~toreplace) ]; 
endnodes = [tails (:) ; endnodes(-toreplace) |; 
end 
end 


end 


Matlab Code for HPIRA Test Plots and Statistics 


9o CVS Import of each Component Recovery Duration Times 
[example] = table2array (readtable(’Example.csv’)); 
% [pole] = table2array (readtable(’ Downed Pole.csv ')); 


% [generator] = table2array (readtable(' Generator Loss.csv ')) 
% [substation] = table2array(readtable(’ Substation Loss.csv 
ga 


% [pv] = tableZarray (readtable ("PV Loss.csv ')); 
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т % [rb] = table2array (readtable(' RechargeableBattery Loss.csv 


622 

s Яо [mcb] = table2array (readtable(' MulticellBattery Loss.csv’) 
); 

9 

о data = example; 


2 % Statistics 

з [Critical Path Duration , Critical. Path] = max(data); 

а [Max Recovery Time, Path Index Max] = max( 
Critical. Path Duration); 

s [Min Recovery Time, Path Index Min] = min( 
Critical. Path Duration); 


7 Mean Recovery Time = mean( Critical, Path, Duration); 
s SD = std(Critical. Path. Duration); 
9 Variance = var(Critical, Path. Duration); 





20 
а X = Critical Path. Duration ; 

2 

з % Plots 

м % Line 

2 plot(data) 

ж hold on 

т plot(Critical_Path(Path_Index_Max) ) 

x Ҹо plot( Critical_Path(Path_Index_Min) ,Min_Recovery_Time,’ gx’) 
э Xlabel({’Recovery Paths’,’ ')) 

о ylabel({’ Recovery Time (hr)’,’ ')) 

3 set(gca,'FontSize', 12,’ XTick’ ,[1:numel(data) |) 


2 figure 


x 9o Histogram 1 
3 edges = [0:1:60]; 
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60 


61 


62 


63 


64 


65 


66 


67 


68 


hl = histogram (x,edges); 
[Nl,edgesl,bini] = histcounts(x); 9o Number of Bins 


[maximum  ocurrences1 , ocurrence Біпі | = max(hl. Values); 
xlabel(['Recovery Time (hr)’,’ ']) 
ylabel(('Frequency of Occurence’,’ ')) 


set(gca,'FontSize', 12) 

xlim([0,Max Recovery Time |); 

i = max(ocurrence binl); 

rl = hl.BinEdges(i:i+1); 

rl [rl fliplr(rl)]; 

yl = [0 0 repmat(hl.Values(i), 1, 2)]; 
hl patch = patch(rl, yl, ’red’); 

hold off 

figure 


% Histogram 2 

most common, duration = mode(round( Critical. Path, Duration)); 
most common, path = Critical. Path (most common duration); 

а = data(most common path ,:) ; 

edges = [0:1:60]; 

h2 = histogram(d, edges); 

[N2,edges2 ,bin2] = histcounts(d); 9o Number of Bins 


[maximum ocurrences2, ocurrence bin2] = max(h2. Values); 
xlabel(['Recovery Time (hr)’,’ ']) 
ylabel(('Frequency of Occurence’,’ ')) 


set(gcn,'FontSize', 12) 
xlim([0,Max Recovery Time |); 


с = ocurrence bin2; 

r2 = 12. ВпЕдрез (с:с+1); 

r2 = [12 fliplr(r2)]; 

y2 = [0 0 герта((ћ2. Уашев(с), 1, 2)]; 


h2_patch = patch(r2, y2, 'гед'); 
hold off 
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APPENDIX Н: 
BOE Matlab Models 





Matlab Code for Modeled Multi-Scale Microgrid Failure 
Event BOE Calculation 


% CVS Import of each Component Recovery Duration Times 
[pole] = table2array(readtable('Downed Pole.csv’)); 
[generator] = table2array(readtable(’ Generator Loss.csv’)); 
[substation] = table2array(readtable(’ Substation Loss.csv’)) 


table2array (readtable('PV Loss.csv’)); 
table2array (readtable(' RechargeableBattery Loss.csv’) 


[pv 
[rb 


] 
] 
3 
[mcb] = table2array (readtable(' MulticellBattery Loss.csv')); 
% Desired Inputs — Manual Inputs of Failed Systems 

Pole = 500; 


Generator = 25; 
Substation = 8; 
РУ = 50; 

RB = 6xSubstation ; 
МСВ = 4; 


% Тоїа1 Кесоуегу Тїше 


format bank 


for К = 1:Pole 
Pole Duration(k) = sum(max(pole (:,k))); 
total pole = sum(reshape(Pole, Duration ,[],1)); 


end 
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Гог К = 1:Generator 
Generator Duration(k) = ѕит (тах ( сепегатог (:,К))); 
total generator = sum(reshape( Generator, Duration ,[],1)); 


end 


for К = 1:Substation 


Substation_Duration(k) = sum(max(substation (: , k))); 
total substation = sum(reshape(Substation Duration ,[],1) 
); 


епа 


for К = 1:PV 
PV Duration(k) = зат (тах (ру(:,К))); 
total. pv = sum(reshape(PV Duration ‚[],1)); 


end 


for К = 1:RB 
RB Duration(k) = sum(max(rb(:,k))); 
total rb = вшп(гевһаре (КВ Duration ‚[],1)); 
end 


for К = 1:MCB 
МСВ Duration(k) = sum(max(mcb(: , k))); 
total mcb = sum(reshape(MCB Duration ‚[],1)); 


end 


% Total Recovery Time (hrs) 
Total Recovery Time hours = sum(total pole + total generator 
+ total substation + total pv + total rb + total. mcb) 


Total Recovery Time days = Total Recovery Time, hours/24 


clear 
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Matlab Code for Predicted Multi-Scale Microgrid Failure 
Event BOE Calculation 


% Recovery Predicted Max/Min Values Import of each Component 
Recovery Duration Times 
[~,sheet_name]=xlsfinfo(’Recovery Action Sets.xlsx’); 
for k=1l:numel(sheet_name) ; 
[~,~,predicted{k}]J= xlsread(’Recovery Action Sets.xlsx’, 
sheet_name{k}); % Update 


end 


% Desired Inputs — Manual Inputs of Failed Systems 
Pole = 500; 


Generator = 25; 
Substation = 8; 
PV = 50; 

RB = 6xSubstation ; 
МСВ = 4; 


% Тоїа1 Кесоуегу Тїше 


format bank 


% Pole Predicted Values 

Pole Min = cell2mat( predicted {2}(26,4)); 
Pole Max = cell2mat( predicted {2}(26,5)); 
Total. Pole Min = times (Pole , Pole Min); 
Total. Pole Max = times(Pole , Pole Max); 


% Generator Predicted Values 

Generator Min = cell2mat( predicted {3}(26,4)); 
Generator Max = cell2mat( predicted {3}(26,5)); 

Total Generator Min = times (Generator , Generator. Min); 


Total Generator Max = times( Generator , Generator Max); 
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% Substation Predicted Values 

Substation Min = cell2mat(predicted {4}(26,4)); 
Substation Max = cell2mat( predicted {4}(26,5)); 

Total Substation Min = times(Substation , Substation Min); 


Total Substation Мах = times(Substation , Substation Мах); 


% PV Predicted Values 

PV Min = cell2mat( predicted {5}(26,4)); 
PV Max = cell2mat( predicted {5}(26,5)); 
Total PV Min = times (PV,PV Min); 
Total. PV Мах = times (PV,PV Мах); 


% MCB Predicted Values 

MCB Min = cell2mat( predicted {6}(26,4)); 
MCB Мах = cell2mat( predicted {6}(26,5)); 
Total MCB Min = times (MCB, MCB Min) ; 
Total МСВ Max = times (MCB, MCB Мах); 


% RB Predicted Values 

RB Min = cell2mat( predicted {7}(26,4)); 
RB. Max cell2mat(predicted {7}(26,5)); 
Total RB. Min = times (RB,RB Min); 
Total ЕВ Max = times (RB, RB Мах); 


% Total Predicted Recovery Time (hrs) 

Total. Recovery Min hours = sum(Total, Pole Min + 
Total Generator Min + Total Substation Min + Total PV Min 
+ Total MCB Min + Total ЕВ Min) 

Total. Recovery Min, days = Total Recovery Min hours/24 

Total. Recovery Max hours = sum( Total Pole Max + 
Total. Generator Max + Total Substation Max + Total PV Max 
+ Total MCB Max + Total ЕВ Max) 
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» Total Recovery Max days = Total Recovery Max hours/24 
60 


& clear 
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